last executing test programs: 5m50.91793824s ago: executing program 3 (id=344): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) getpgrp(0xffffffffffffffff) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/gre0/enhanced_dad\x00', 0x88042, 0x0) poll$auto(&(0x7f0000000080)={r0, 0x0, 0x5}, 0x5, 0x49) (async, rerun: 64) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) (rerun: 64) 5m49.63732524s ago: executing program 3 (id=351): ioctl$auto_EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)={0x0, 0x8, "3c7fa3b503b011e4b5c9505537ad934e6654efe519ec476ccfe0a50aea4898a3f7200568a3815de3feeda5a3b4272908091b514cc0e1a33dc74e7889bb8a1ee65a53196737c95f3a8b23492a32f2fb49f83d6a65ba3cfc12846dc08349c68b307df1a6cd03329b7396c708a4bfd4a30229f52afafe31f0c17c94b7dfc0185b5cf1651382fe810997be9e9f2a49a77f8d0ff86f371b88985bb3745d46b82c30ec4274784251305f68d8d07a220e2ba230d8dd1f374c17c3ff2ceb3ad42dad96cce4786361399edc4e624767463a664db985704e5f390424339a91be2ba4001795d61703c2759c83f61ec40191dc71eef9faa7ebef9fadf714"}) read$auto_ext4_dir_operations_ext4(0xffffffffffffffff, &(0x7f0000000100)=""/8, 0x8) r0 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy11/short_retry_limit\x00', 0x8002, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x3) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm1c/sub1/info\x00', 0x488000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/149, 0x95) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000002c0), 0xffffffffffffffff) msgctl$auto_IPC_INFO(0x400, 0x3, &(0x7f0000000380)={{0x3, 0xee00, 0xee00, 0x80, 0x4, 0x2, 0x8000}, &(0x7f0000000300)=0x46, &(0x7f0000000340)=0xd, 0x9, 0x0, 0xfffffffffffffffc, 0x686c, 0x3, 0xd0, 0x0, 0x3, @raw=0x80000001, @raw}) shmctl$auto_IPC_RMID(0x8574, 0x0, &(0x7f0000000580)={{0x9, 0xee01, 0x0, 0x4, 0x10001, 0x834579a, 0x9}, 0x1, 0x7fffffffffffffff, 0x5, 0x2, @inferred, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000400)="c4f76186ee6abeca706de35273f6d2a4afdfe71babc1695149e4dea7d118c5dcf8d1ecdaef7331128f1edd1e9598aa81bc6b20e87662df230038c34fb6deb77f982d24303d66344f0f5fde2f500c252fe2c81fd89d9c7cc43e5f24c53b06680386f9b2aec475001a28dc5a5e11ec68cef67b8881d799ef44043423834e3fc72910967d59395ec2097df33773a4de6acdd00bd1a86c08bcf6b1d7", &(0x7f00000004c0)="a034a84a95bbe45719980d3482ffd1e8dfddae39168031ab98468d8264aca7bdab19c020f7c863a61c212405e1443ac0e5a6ff75f785044a235c3724ed115eb32b7463cc17b78a712319a682853f3c745711817b17bd8f92152612fc4292aa76da7748a4ffe682ba255130fbc92c84b17963fb0608e354f06f7d3cf6fb8522b0ad993e54"}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000d40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000600)={0x6f0, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x12c, 0x2, 0x0, 0x1, [@nested={0x123, 0xa5, 0x0, 0x1, [@typed={0xc, 0x37, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0xc6}, @nested={0x4, 0x4e}, @generic="531583efa34f0b48557333f01d85fb8b6e59b43168c0f4e10943011e366d6d3599e873838b4c5836840005b497f6d8e100cffd473a3a9a1d193122b601caa4376c94aba816e9fcd59a34520faa1454b1e73dea094d63e757bbe302db646ba82db6aee9320681fc413cd37d8043ccf04c37c1f510c26f0c3820789f49b3360fae59e773a7f3e5408fdd24e3be98d254ee8d4bd5b3987ab3e9c42079908cd42a1c7cd5c8d48a76ef352961eaed0f6b0dc7ef6a6c1d31fe1f404552", @nested={0x4, 0x4e}, @generic="36968823e8ebfaaf6da119774ac85ad1e2af35cdfe27752cbc42b1c3e68dbf908cbe63ef30066cac892ed7f6635b04a3cae6dbffb1f3078fcc030e3954d4c234fc32650991"]}, @typed={0x4, 0xdb}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x11d, 0x3, 0x0, 0x1, [@generic="b5f965a0f3844af06bb7a37f31212b76a2dd038e14ad072df46a982bb1bc988153494a1d652a7a0cf567cbfc8478900c0a003d652becc94ca1c9ab3c17f58737150551b0e653c7cce1cc92fd4c7a6dc837a78a8c03f0912c2a505cf490a1819ab139370e7561b7f8854bdcdd926cf5771d01cc1edd6683c1f49b8460bb985bd07637d3890c986131905552578d07e78a6a6e552ad7639f21a12a735571bb50", @generic="edcc5d80b7f0c175fd6733713451dd6011f6d1f6e8dd5da39dc0a9a05d34bfdf9eb909b37d25c3856f3a9b9e02fb797d6ff3b788cbab0510973fa42d639c63ba421201530d5d8aa1afab588e200f247c2330fed85ca0c29238ca3e47e434ff901104993be2a98e7fdc9d62379754e4becf18f337d5af67278edb"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x36b, 0x3, 0x0, 0x1, [@generic="2b3fbfcd3f1a39002d626f045b2c5deaf69d2434600bebbba0d383d8627e332d83b0e755bafa7ddca5d7ea6841590670e754c0fc66ca40158998d3a34c37ac3e24fac8732cf94ea42fcb3c9eb3e25bed103f05ef641af684f47b68ca115254dbc8f2ba34a932868ead1e80b38b5a39afed78408fe73f3f855e0f0428c73decd66ea453eb59631f8318e0c88886dc193780938f6549a9e9a55b19b2c32f0143d08ea34bd66aa9785058245447f8df582e45ddde99a2994d44c4", @generic="24da685c032395929b707db470a24da3e2b5f9059ef3dc429fcce22b291dd356a6ac9f0b1cf887c942db0a83939918c7e4355e102c0f689f", @typed={0x8, 0xf6, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=r4}, @generic="dd0a2003b545225c7a3c8bffccd73bcf51caefc600d07d3cb558b025997b79c2beea8f98378b15b026877b115091cfc4fb1f213712643f72ef0934e8b4f4ca7ecc6865c7a70f6feff4f0da4bab9cf8a67a043fbfa24537bd0ec5ee70c008b01ed081568555e49eb89d34169d5e6fb0b6b8a3700104d6e46ddf9cb423f1cdd8a682ee68c4a9342b245b7ade602d1e40a1833a6587eb0ae96f757ec2209bddb23f4744589aba905a2c80f9ad1bf6ffbbe759f233c6da1665b4", @nested={0xe4, 0x18, 0x0, 0x1, [@typed={0x4, 0x49}, @nested={0x4, 0x4a}, @typed={0x8, 0x122, 0x0, 0x0, @u32=0x4}, @generic="cca8bb46e8f75e3cbfac0642ebb74e815eeaf1fe7c3a2faee6f9567c3114746d9d98efbf4ef174c4b1abec9c8fc523d37024737c90eee98f73fd778a5a887b61382f5c1dabfacf9d26ef2fa7ab7bf7791ba32119d6e814f1470d71f97db65369678025b77b56dd0837f7ae2e7a4fe950d46335925073e3138e9e9bdd92decf38498f8c370701e915bb2e47a14290304f219eb2fa8832144cdb418de52ff5d87838c5b7feb13445a342d7c4719f3ff0ee66431a09df3d891d7ea55aed2aee656e3fbf67384ce24c77fc2f270fab23caef"]}, @generic="2c4ea45940beddae6c651d65fc3e", @nested={0xb3, 0xd1, 0x0, 0x1, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x8908}, @nested={0x4, 0x35}, @generic="41f73c0269f034666e015ee0fc9b465d0415d05345e58f91066090f9126d2ad4d9eb0dff3fe9b94322b8f065b5360ec6793349f174393e7c1a114c50c29b89bb50c7f1212d5ddec3841b997d1f4621a8007fede7f2d9989d7a524d4562e09600eba9fe205e2fd77f0b222b9371eab97a1bc18ca3b500821773b491ca54f48db8774bb20b4d77c6a039742a6b54ce1d54e1c11fe699d21bbf44788c", @nested={0x4, 0x61}]}, @typed={0x8, 0x48, 0x0, 0x0, @fd=r1}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x124, 0x3, 0x0, 0x1, [@typed={0x38, 0x56, 0x0, 0x0, @str='/sys/kernel/debug/ieee80211/phy11/short_retry_limit\x00'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}, @nested={0xdc, 0x120, 0x0, 0x1, [@generic="e8eba7dd35d360babd7982110fb9ecfeb0dc71b9cb57ff9a35693456b8a11eb51edb7ef870b42a634aafd9c09241b3235c5b24fb408566133a176f93b386ddb05ba5745b887c1ff1e7c8e60f0ef3466a31ffd6eb0e036444a89aba2cb74c9817087e2a3f271379246789edea8c1c6fac6716553d0044c89fbf0bfe70295e69dee66f13c84c614ca4c194f50b6e8941ede0ac214c43bdce173001afdd4d8be5ff2045ef6ba6e6b10855ae7c081ab07a0e29f971953e60645913004915cefc6440006fba2f", @nested={0x4, 0x12d}, @typed={0x8, 0x44, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r0}]}]}]}, 0x6f0}, 0x1, 0x0, 0x0, 0x8800}, 0x6040854) r6 = epoll_create$auto(0x1) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000d80)="5438d1889648ce4227") fcntl$auto_F_GET_RW_HINT(r1, 0x40b, 0x100) r7 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10002, 0x0) close_range$auto(r7, r1, 0x10000) getsockopt$auto_SO_MAX_PACING_RATE(r7, 0x9, 0x2f, &(0x7f0000000e00)='^/-^\x00', &(0x7f0000000e40)=0x80000000) sendfile$auto(r7, r6, &(0x7f0000000e80)=0x200, 0x9) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc006}, 0x4c800) r8 = getsockopt$auto(r2, 0xffffffff, 0x0, &(0x7f0000000fc0)='\'\xca\\.%X+{/.((-#{!+[^/\x00', &(0x7f0000001000)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001080)={'syzkaller1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r8, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r9}, @NET_SHAPER_A_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040080) accept4$auto(r2, &(0x7f0000001180)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, &(0x7f00000011c0)=0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/ieee80211/phy5/fragmentation_threshold\x00', 0x440000, 0x0) close_range$auto(r10, r7, 0x200) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001280), r2) sendmsg$auto_NL80211_CMD_EPCS_CFG(r2, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r11, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x24}}, 0x24000045) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r12, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x8884) 5m48.993139898s ago: executing program 3 (id=353): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_TCSBRK2(0xffffffffffffffff, 0x5409, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000f7, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) socket(0x2a, 0x2, 0x1) write$auto(0x3, 0x0, 0xffd8) setsockopt$auto(0xffffffffffffffff, 0x4, 0x80, &(0x7f0000000000)='\x00', 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x2003f0, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x62a002, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x9210642d, 0xc5) r1 = dup$auto(0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0x80000000df, 0x9b72, r1, 0x28000) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x20, 0xf1, 0xb0, @raw=0xfffff014}}) readv$auto(r2, 0x0, 0x19) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x2, 0x0, 0x28) 5m45.642284746s ago: executing program 3 (id=360): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) fcntl$auto(0x3, 0xc, 0x0) open(0x0, 0x22240, 0x154) fcntl$auto(0xffffffffffffffff, 0x7, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) futex_waitv$auto(0x0, 0x81, 0x0, &(0x7f0000000340)={0x92, 0x6}, 0x8) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, 0x0, 0x80040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88f42, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r1 = socket(0x1d, 0x2, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) getsockopt$auto(r1, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) 5m44.489521906s ago: executing program 3 (id=365): r0 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r0, 0x0, 0x1000e6e) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = socket(0xa, 0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(r1, 0x0, 0x50, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x1000, 0x9b72, 0xffffffffffffffff, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x2, 0x88) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) setsockopt$auto(r2, 0x29, 0x10, 0x0, 0x1) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0xffffffe6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2005, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 5m42.785562921s ago: executing program 3 (id=372): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x35ff6cd3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/swradio8/dev\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/resolution\x00', 0x183902, 0x0) write$auto(r1, 0x0, 0x4) r2 = fsopen$auto(0x0, 0x1) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x80044944, 0x0) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m42.000028748s ago: executing program 32 (id=372): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x35ff6cd3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/swradio8/dev\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/resolution\x00', 0x183902, 0x0) write$auto(r1, 0x0, 0x4) r2 = fsopen$auto(0x0, 0x1) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x80044944, 0x0) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m12.653481951s ago: executing program 1 (id=1020): setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x9, 0x3, 0x81d7, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = gettid() prctl$auto(0x1000000003b, 0x1, r2, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x2) 1m12.230840602s ago: executing program 1 (id=1021): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="f320f820c75c20d9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x1e) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) write$auto(0x3, 0x0, 0x3f00) close_range$auto(0x2, 0x8, 0xfffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r1, 0x2, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) dup2$auto(0x0, 0x3) 1m11.917377222s ago: executing program 1 (id=1022): mmap$auto(0x2, 0x2020009, 0xfffffffffffffffc, 0x800000000000eb1, 0xfffffffffffffffa, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0xff, 0x2, 0x8000, @_sigsys={&(0x7f0000000240)="b089237097b88e40064c533331bb0ef0f3871bb6271d7c7ebbe31d346d27fcd831cda35f211ad5adaa038e646c925d67cb31086631f969ce129b0382463779415e39b70fdf797cdb0eca20afbf1e054a9d1bf9b9fa44a34ce03f43ec9f1a78f74d9ccfca985bd58f840af3597c60703d4620907775a0081ef431f8be10d6c7e35ff52ec27aa3d1eadd29fe6529475538b872e0ee7197cf928e9dff0c41514b651f787dcf714aff7f2ec83d8412b0ad30a25b00075552903ebc130811936d5bd79f1741067769d3a50baa767782d8d0426cfc", 0x9, 0xfffffffe}}}, 0x3ff, &(0x7f00000003c0)={{0x3, 0x8}, {0x9, 0xfffe}, 0xc4, 0x5, 0x7f, 0xffffffffffffffff, 0x9, 0x5, 0x3fe, 0x6, 0x4, 0x100, 0x7, 0x6, 0x1, 0x819b}) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0xb, "0600000200000000"}, 0xc) kcmp$auto_KCMP_FILE(r2, 0xffffffffffffffff, 0x0, r1, r0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101100, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ab, 0x5, 0x7, 0x6, 0x10000, 0xcba, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x44a2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x7f12, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) write$auto(0xffffffffffffffff, 0x0, 0x81) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) pkey_mprotect$auto(0x80000000, 0x0, 0x7, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x808000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) 1m10.864915279s ago: executing program 1 (id=1028): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) (async) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000002300)={0x0, 0xffffffffffffff6d, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r4) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x408041, 0x0) (async) r6 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x408041, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r8], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000002940)=ANY=[@ANYBLOB="14120000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf253d00000004008c0005003001070000000500a3000c000000d81123808300578041f7725fab9389b25ed5447ae30c9ac8381b10caae0bd3d423cb11f9f62f54e2e322eb4e50e545ef2332024f9e416bb92093e3ba530946a6454192b0b1b5af5cdfe6c1831d7d4d3e848daeec1307c15f0c8ec2cabd567ef49fcc4384bf6ea4645c5ea6d21b1f005cf2371dde6ee387def5a259abb4ef03cda2ef3a550a3930e3ce887da418c30008007400", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0500b900000000000500c800000000009d00bf80963f6aae9050a8b0f529a849425eb18d73effa0a6a2d0a7fa14ed6723c0eef9cecd3c38dd0f31108bfc08057e7f7ba5e34dda18a57cd74101b547538517ca89da7ea27a5fdfb66d30a0cee569aed3bfd4bac574f39bb6d312dbfc267d59e2617da099d4aaf115ac1f78a69dd800400af800e008a002f6465762f747479300000000800d700", @ANYRES8=r1, @ANYBLOB="0400258008000b00", @ANYBLOB="575a422a293e2b62c2850ae39404dfa8f247e9a893e30737144a87d1fb0ec9c157d11bf7941c9ab95a11d2305c622d490400dabc238fb53f472840ad5130870b0091ca5c5d6f576294", @ANYRES8=r7, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="05000300fe000000"], 0x1214}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r4) mmap$auto(0x54, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x54, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) (async) read$auto(0xffffffffffffffff, 0x0, 0x1) 1m9.717387852s ago: executing program 1 (id=1031): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000200)='//\xf2\x00`\x89\xcb.\x92\x03\xf1\x14v9p\xef\xb6?w\xe2\xcc<\xeb\xdd1\xefH\xbe1\xbfw\xf6\xdb\xf6z\x00\xc0\xc3\xff\v|o4\x19\xfa(\xa9ae\x80\xd2\x16\x9b#QzV3n\x17k1\xadt\x80\f\x83\a\xd1\x8a\xf5\x84\xe1N\x19\bz\x82\xb8\xa5\xe9\x7f\x8d\xa9\xc2\x13\xffc\xbcn\x12\x19=\xee\xa2z\x86J\xc8\x14\x9e\xcd\x19\xaf3\x87\xb3\x035\xcf\xe4S\x02\x02\xd6\xc0|\x1d\x87\'\xc2>ER)DxqO\x85\xbc\x9c\v-\x9f\xa3\x189\xf8\x8d\xfc\xca\x0f#\x01,\xa9\xe9H*\x83\f\x02\x15\x17b\xaa\xb3\xe9\xfd\xddn\xb3\xf0\x16\x82\x0e\x00\xe8\x9b\xa95<^\b0fVf\x81\x90\xc6x3o\v\xf1\x02\xb0\t\x80\x86\xfb\xa9]\x96\xf0', 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) select$auto(0xfffffffa, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20001000f9e100125dd28a3e8e588585da33c26d4b51c251e255eb33b8799d83a6499058876394e4d456e1ca8a2f7b0e145160b418f7d64e0d073fefe12c9baf267cd0ed85e4a1fe7e097f7ac1aff45b88e0a7712ecbc73174cef930193993c9ada9527adaac1e9967a00e0e6d83a747daeb2786cf0c2487de6ff048ee27e44212f36395e30d14a0631d6d66d85a989e466e6cd09dd078c96faa2f807fee5f822c91aa50f4ca86ed087d7ec769436c8b3d8e296afe7cc51ed50f500553b27778a7e1fc5b263fe86cc17813d15708bdb79b3ff3b1812cb90f95a2a1a339f051d13a813cee98ae7c7864", @ANYRES16, @ANYBLOB="010026bd7004feb1df25010000000c000300060000000000000044544c277b851a207336181df9183f916cbcb6e4c5cb7c2faef597a8bdd6403ef8", @ANYRESHEX=r1], 0x20}}, 0x4) r3 = socket(0xa, 0x2, 0x2) getsockopt$auto(r3, 0x29, 0x3d, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, r3, 0xfdfd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyea\x00', 0x9c1c0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x98000, 0x0) 1m8.337250005s ago: executing program 1 (id=1034): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r2, 0x80044100, 0x0) write$auto(r1, 0x0, 0x400000000005) gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) msync$auto(0x77, 0x9, 0x80) ioprio_set$auto(0x2, 0x800000000, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x400000006, 0x22, 0x40ebf, 0x401, 0x8) fadvise64$auto_POSIX_FADV_DONTNEED(r1, 0x0, 0x2, 0x4) r3 = socket(0x2, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r4) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400f1fffb5cc0e7ef7a2a48dfabbed854fc14b3ac3414d19024d7a020da965157464238bd3f0f4c8bbe58ddf5464d2f65340a7aca026a1a44875f53cbe9eeb4b45599c57ed7b66db947c6a0b8624d001b31bb699ec71cc31eb306d3d201775da3818ef98126274c2e1ba4109b9022baeba58d28780ba0a10df9d63224d46763cd4139ddc595d8f3a95b8abfe8e57fadc488acbc5d49456e2e014285e3a22cba12b74e66c1e01d368153694e186aeb7307382609cfcced1b5bf38e2bd510a218135c76bb600070fb9649bf9d190c34b36b60d4a2a3b7bca3", @ANYRES16=r5, @ANYBLOB="090f2abd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00<', @ANYRES16=r5, @ANYBLOB="02002cbd7000fddbdf252b00000014000400767863616e3100"/34], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40001) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) ioctl$auto_EVIOCSMASK(r6, 0x40104593, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd15/sched/dispatch2\x00', 0x18080, 0x0) 53.107878541s ago: executing program 33 (id=1034): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r2, 0x80044100, 0x0) write$auto(r1, 0x0, 0x400000000005) gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) msync$auto(0x77, 0x9, 0x80) ioprio_set$auto(0x2, 0x800000000, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x400000006, 0x22, 0x40ebf, 0x401, 0x8) fadvise64$auto_POSIX_FADV_DONTNEED(r1, 0x0, 0x2, 0x4) r3 = socket(0x2, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r4) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400f1fffb5cc0e7ef7a2a48dfabbed854fc14b3ac3414d19024d7a020da965157464238bd3f0f4c8bbe58ddf5464d2f65340a7aca026a1a44875f53cbe9eeb4b45599c57ed7b66db947c6a0b8624d001b31bb699ec71cc31eb306d3d201775da3818ef98126274c2e1ba4109b9022baeba58d28780ba0a10df9d63224d46763cd4139ddc595d8f3a95b8abfe8e57fadc488acbc5d49456e2e014285e3a22cba12b74e66c1e01d368153694e186aeb7307382609cfcced1b5bf38e2bd510a218135c76bb600070fb9649bf9d190c34b36b60d4a2a3b7bca3", @ANYRES16=r5, @ANYBLOB="090f2abd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00<', @ANYRES16=r5, @ANYBLOB="02002cbd7000fddbdf252b00000014000400767863616e3100"/34], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40001) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) ioctl$auto_EVIOCSMASK(r6, 0x40104593, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd15/sched/dispatch2\x00', 0x18080, 0x0) 12.053441517s ago: executing program 4 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), r0) sendmsg$auto_IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40000) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) getsockopt$auto(r0, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) 11.756238429s ago: executing program 4 (id=1166): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x6, 0x8000000008011, 0x3, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101101, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40000000000e983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) pipe$auto(0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x3}, 0x55) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000040)={0x91b6, 0x1ba, 0x1, 0xffffffffffffffff, 0x5, 0x0}) get_robust_list$auto(r0, 0x0, 0x0) 9.982466483s ago: executing program 4 (id=1167): mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0xaa482, 0x0) ioctl$auto(r0, 0x40104d14, r0) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) pread64$auto(0xffffffffffffffff, &(0x7f0000001800)='#\\h,\x00', 0x3, 0x8) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x201, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx3\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) open(&(0x7f0000000080)='./file0\x00', 0x2020c0, 0x44) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x101000, 0x0) 9.681257959s ago: executing program 5 (id=1168): mmap$auto(0xd, 0x2e241202, 0xdf, 0x410, 0x401, 0x400) rseq$auto(0x0, 0x1c, 0x5d7, 0x9) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x20000000) poll$auto(0x0, 0x4, 0xb88) socketpair$auto(0x2000008, 0xffffff00, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000040)=0x3) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 9.399883712s ago: executing program 0 (id=1169): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, r0, 0x0) r1 = socket(0x2b, 0x1, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000040)=""/133, 0x85) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.7/usb24/24-0:1.0/usb24-port2/power/pm_qos_no_power_off\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/45, 0x2d) sendmmsg$auto(r1, 0x0, 0x3, 0x20000000) connect$auto(0x3, 0x0, 0x55) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0x7) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x8, 0x0) r3 = fcntl$auto_F_GETOWN(r1, 0x9, 0x9) migrate_pages$auto(r3, 0x285c18bd, &(0x7f0000000100)=0x89, &(0x7f0000000140)=0x763e) io_uring_register$auto(0x2, 0x18, &(0x7f0000000200)="2c54529af0b3e15f78b470705b0cee1b62c8a441a7b1fc0200a46582a8dd0900b2a4879f805a0bf9a4a729faab088d92ecbab823336003f633a50c105c75f36596c31d8d4bfd6b85d67f669b8681cca3af8a7ff9c0ead94921c99900038e647f71004ce4951077d4f70eff26dc0ce05108d559caaa7165ef315824617a825c804ca70bbe6e3c4c3919d67af3b90ff422b271414b18070bb06274e8fce181e1f1e75ac650c30f", 0x1) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/arch_status\x00', 0x240, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.727189952s ago: executing program 4 (id=1172): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7000f9d3df2501000080"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r6) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd700003dcdf250400000014001a80100004800c0001800500080000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 8.467429754s ago: executing program 2 (id=1173): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) read$auto(r1, 0x0, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d8) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x200c01, 0x0) mmap$auto(0x0, 0x2220009, 0x3, 0x4000001000000010, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4480, 0x0) 7.98074141s ago: executing program 0 (id=1174): sched_getscheduler$auto(0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x80000, 0x1c0125be) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x1, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x7) shutdown$auto(0x200000003, 0x2) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x40}}, 0x54) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000340)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x5}, 0x800) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x5b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x4000000000000eb2, 0xfffffffffffffffa, 0x7fff) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sched_getscheduler$auto(0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x29, 0x80000, 0x1c0125be) (async) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) (async) socket(0x2, 0x1, 0x6) (async) socket(0x2, 0x1, 0x0) (async) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x7) (async) shutdown$auto(0x200000003, 0x2) (async) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x40}}, 0x54) (async) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000340)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x5}, 0x800) (async) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) (async) getpid() (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x5b, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x4000000000000eb2, 0xfffffffffffffffa, 0x7fff) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) 7.409555241s ago: executing program 0 (id=1176): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x8000000000000001) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) r3 = socket(0xa, 0x2, 0x0) ioctl$auto(0x3, 0x5411, 0x38) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x2, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r5, @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r4, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, r2, 0x10000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/reads_11\x00', 0x0, 0x0) r7 = socket$auto(0x200, 0x1, 0xe) ioctl$auto_TUNSETDEBUG(r7, 0x400454c9, &(0x7f00000000c0)=0x8) r8 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r6, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x5) ioctl$auto_BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) r9 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r9, &(0x7f0000000180)=""/61, 0xfffffeeb) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r3) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28001000", @ANYRES16=0x0, @ANYBLOB="050a2bbd7000fbdbdf2501000000120003002c4e2b262c252e295e343a2d2d7d0000"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 7.13870563s ago: executing program 4 (id=1177): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x32140, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xe4, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xd0, 0x3, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r1}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a", @nested={0x28, 0x5, 0x0, 0x1, [@nested={0x24, 0x63, 0x0, 0x1, [@nested={0x20, 0x9e, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @str='/}!\x00'}, @nested={0x10, 0x86, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x6}]}, @nested={0x4, 0xc9}]}]}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d3841d6"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) 6.73740691s ago: executing program 2 (id=1178): unshare$auto(0x40000080) mmap$auto(0x4, 0x20009, 0x7, 0x1e, 0xffffffffffffffff, 0xf4a) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0xa, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x8, 0x7f, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001380)=""/134, 0x86) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x1, 0x14, 0x944, 0x1ffe0, 0xa1b, 0x6, 0x7, 0x5, 0x3, 0x4000fff, 0x8000007, 0x8001, 0xffffffffffffffff, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x800000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x60f8d49e, 0x4, 0x40, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x81be, 0x0, 0x4b5, 0x0, 0x0, 0x0, 0x7f, 0x800000000004, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x1fb, 0x81) bpf$auto(0x6, 0xffffffffffffffff, 0x0) close$auto(r3) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1\x00-'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r4 = socket(0x2, 0x1, 0x106) bind$auto(r4, 0x0, 0x46a) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) r5 = socket(0x10, 0x804, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0x10001}, 0x2, &(0x7f00000002c0), 0x7, 0x2505}, 0x800}, 0x7, 0x400c) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/\x00\x00\x00\x00oq\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 5.721874598s ago: executing program 5 (id=1179): getdents$auto(0xffffffffffffffff, &(0x7f0000000000)={0x58, 0x6, 0x8, "fc57d1f76c7b7003247588a4a7a10f8f678f3ff0963c2b73ae2566f1ed0486"}, 0x8) madvise$auto(0xf8, 0x8, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket(0x1, 0x1, 0x0) setsockopt$auto(r4, 0x80000000, 0xac3, 0x0, 0x800008) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r2, 0x2, 0x1, r1, @relative_id=0x6, 0x2000001}, 0xf) open(&(0x7f0000000280)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000000c0)=@token_create={0x3, r2}, 0x91) r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000040)={r5, 0x1000, 0x1c9}, 0x2, 0x7) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) setreuid$auto(0x9, 0x1) ioctl$auto(r6, 0x4b48, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x4000000, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x1000, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x7, 0x6}, 0x10) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeep\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) bpf$auto(0x18, &(0x7f0000000040)=@batch={0x9, 0xfffffffffffffffc, 0x3a12, 0x2, 0x9, r5, 0x8, 0x3}, 0x92) mmap$auto(0x4000000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) 5.71693685s ago: executing program 0 (id=1187): mmap$auto(0xd, 0x2e241202, 0xdf, 0x410, 0x401, 0x400) rseq$auto(0x0, 0x1c, 0x5d7, 0x9) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x20000000) poll$auto(0x0, 0x4, 0xb88) socketpair$auto(0x2000008, 0xffffff00, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000040)=0x3) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 5.335396811s ago: executing program 2 (id=1180): socket(0xa, 0x3, 0x3c) prctl$auto(0x8, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100042, 0x0) mmap$auto(0x3, 0x4020009, 0xdf, 0x400000000e3f, 0xffffffffffffffff, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0xb071, 0x8000000000000001, 0xdb, 0x13, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x4, 0x0, 0x0) capset$auto(0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/vlan/config\x00', 0x121040, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) open(0x0, 0x121840, 0x33903f3ada88772b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/btrfs/features/send_stream_version\x00', 0x2800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/195, 0xc3) mmap$auto(0x0, 0x10005, 0x1, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pivot_root$auto(0x0, 0x0) open(0x0, 0x76bd, 0x12) 5.0029708s ago: executing program 5 (id=1181): r0 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_cancel$auto(0x4, &(0x7f0000000040)={0x3ff, 0x2, 0x10, 0x4, 0x5, 0xffffffffffffffff, 0x7, 0xc7, 0x6, 0x0, 0x8de}, &(0x7f0000000080)={0x2, 0x7, 0x7, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="32bb67fb34234af6df250600000008001700080000000400120004001d0008000a0005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e75"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) gettid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) unshare$auto(0x14) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) socket(0xa, 0x1, 0x100) ioctl$auto(r0, 0x2, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.381382177s ago: executing program 2 (id=1182): mmap$auto(0xd, 0x2e241202, 0xdf, 0x410, 0x401, 0x400) rseq$auto(0x0, 0x1c, 0x5d7, 0x9) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x20000000) poll$auto(0x0, 0x4, 0xb88) socketpair$auto(0x2000008, 0xffffff00, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000040)=0x3) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 2.460402858s ago: executing program 5 (id=1183): mmap$auto(0xd, 0x2e241202, 0xdf, 0x410, 0x401, 0x400) rseq$auto(0x0, 0x1c, 0x5d7, 0x9) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x20000000) poll$auto(0x0, 0x4, 0xb88) socketpair$auto(0x2000008, 0xffffff00, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000040)=0x3) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 2.42679413s ago: executing program 0 (id=1184): r0 = getpgid(0xffffffffffffffff) r1 = prctl$auto(0x5, 0x5, r0, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x21) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) io_uring_setup$auto(0x6, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x8400, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000081) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1804a699", @ANYRESOCT=r1, @ANYBLOB="01002cbd7000fedbdf2504000000040019"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.91031621s ago: executing program 0 (id=1185): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) open(0x0, 0x7ffd, 0x2a) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="b60326e5357275f7c0252d"], 0x20}, 0x1, 0x0, 0x0, 0x2400c052}, 0x2004c011) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setitimer$auto(0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0) arch_prctl$auto(0x1024, 0xfffffffffffffffb) mmap$auto(0x0, 0x2000c, 0x7, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) mount$auto(&(0x7f0000000000), 0x0, &(0x7f0000000100)='ufs\x00', 0x9, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 1.093031024s ago: executing program 4 (id=1186): mmap$auto(0xd, 0x2e241202, 0xdf, 0x410, 0x401, 0x400) rseq$auto(0x0, 0x1c, 0x5d7, 0x9) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x20000000) poll$auto(0x0, 0x4, 0xb88) socketpair$auto(0x2000008, 0xffffff00, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000040)=0x3) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0603d06, 0x0) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 649.058594ms ago: executing program 2 (id=1188): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/sessionid\x00', 0x183100, 0x0) read$auto_proc_sessionid_operations_base(r0, &(0x7f0000000240)=""/238, 0xee) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x5, 0x0) read$auto(0xc8, 0x0, 0x0) getsockopt$auto(r1, 0x0, 0x8, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x840, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001880)=""/4101, 0x1005) 492.573279ms ago: executing program 5 (id=1189): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f0000000400)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[4\xce\xea\xd2\t2\x01\x15\xba\xda\xb6\t\x14\xfe\x18\\P\xe4s\xc3;\xeedP\v8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02tr\xa5\xf7\xdb)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x0e\xf4z\xa7\x0e\xa2[bq\xbb\xab\xd5^>\b\xd1\x82\x13\xed\x01\xb2\xb7\x04}\f\xa6\xeb\x9e\xa8\xa8\xf9\x16 \x16t\xe764\xaa\x03{Z\x173\xe2\xe5\xa3\x019\xe1\x7fz\xe9\xcc\xb7\x98\xeaFa\x02\x9bc\x85\xf3+\xa0\x90\x97*\x848\xce\xbdo\xe2\x00\x00\x00\x00\x00\x00\x00\x00', 0x83) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a53cc88f5c983c7ba6725f364d1f4c2c548e1979359a879b39b535a365e2f4188cbcff6b13460b9f33d1b73589abecce2463c3f852bfbc7028e260e4d11a82b156724f0a43e3513aa1474ad2b2b99ac1d0680d8bfe2a4cbb70c9673900049fba45013aeec4bd50bb6aaa2d65589561a07b40c0aaa0560bac2c275e"], 0x24}, 0x1, 0x0, 0x0, 0x24044014}, 0x40004844) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/veth0_to_bond/delay_first_probe_time\x00', 0x8a042, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0xc2101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x2, 0x7, 0x100000006, 0x5, 0x3, 0x2000000000230006, 0x4, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x6, 0x24, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d6000000", @ANYBLOB='p\x00', @ANYRES16=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) epoll_create$auto(0x4) (async) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty10\x00', 0x101e81, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty10\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xfffffffffffffffe, 0x0, 0x677f, 0x4) (async) r3 = prctl$auto(0x3e, 0xfffffffffffffffe, 0x0, 0x677f, 0x4) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/68, 0x44) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/68, 0x44) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 5.494683ms ago: executing program 5 (id=1190): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x48080, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000040)={0x61, 0x9, 0xbad, 0x10, 0x0, 0x7, 0x5, 0xed, 0xffffffff, 0x6, 0x49, 0x200, 0xffffffff, 0x240000000, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r2, 0x5100, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r3, r4, 0x0, 0x1) r5 = socket(0x2, 0x801, 0x106) getsockopt$auto(r5, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r6 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x7f, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, r6, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r7, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 0s ago: executing program 2 (id=1198): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7000f9d3df2501000080"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r6) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd700003dcdf250400000014001a80100004800c0001800500080000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) kernel console output (not intermixed with test programs): ] chnl_net:caif_netlink_parms(): no params data found [ 108.029350][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 108.183847][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.196045][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.209495][ T5827] bridge_slave_0: entered allmulticast mode [ 108.225816][ T5827] bridge_slave_0: entered promiscuous mode [ 108.277993][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.287879][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.298622][ T5829] bridge_slave_0: entered allmulticast mode [ 108.309393][ T5829] bridge_slave_0: entered promiscuous mode [ 108.338591][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.352562][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.362812][ T5827] bridge_slave_1: entered allmulticast mode [ 108.372459][ T5827] bridge_slave_1: entered promiscuous mode [ 108.388782][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.397746][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.407094][ T5829] bridge_slave_1: entered allmulticast mode [ 108.417116][ T5829] bridge_slave_1: entered promiscuous mode [ 108.572226][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.589850][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.604206][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.612749][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.623369][ T5830] bridge_slave_0: entered allmulticast mode [ 108.633790][ T5830] bridge_slave_0: entered promiscuous mode [ 108.647392][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.699158][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.708467][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.718514][ T5830] bridge_slave_1: entered allmulticast mode [ 108.727616][ T5830] bridge_slave_1: entered promiscuous mode [ 108.741224][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.752141][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.760693][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.772378][ T5828] bridge_slave_0: entered allmulticast mode [ 108.782894][ T5828] bridge_slave_0: entered promiscuous mode [ 108.848732][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.862368][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.871353][ T5828] bridge_slave_1: entered allmulticast mode [ 108.882515][ T5828] bridge_slave_1: entered promiscuous mode [ 108.895573][ T5829] team0: Port device team_slave_0 added [ 108.965241][ T5829] team0: Port device team_slave_1 added [ 108.977228][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.991497][ T5827] team0: Port device team_slave_0 added [ 109.000696][ T52] Bluetooth: hci3: command tx timeout [ 109.008041][ T5841] Bluetooth: hci0: command tx timeout [ 109.046487][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.076019][ T5827] team0: Port device team_slave_1 added [ 109.081255][ T5841] Bluetooth: hci1: command tx timeout [ 109.082977][ T52] Bluetooth: hci2: command tx timeout [ 109.109567][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.170131][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.182871][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.192068][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.225045][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.241621][ T5830] team0: Port device team_slave_0 added [ 109.251164][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.259372][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.293573][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.327996][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.336906][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.366047][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.381337][ T5830] team0: Port device team_slave_1 added [ 109.398183][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.407441][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.438281][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.471465][ T5828] team0: Port device team_slave_0 added [ 109.505109][ T5828] team0: Port device team_slave_1 added [ 109.531192][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.538756][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.568766][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.628939][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.637400][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.667346][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.758174][ T5829] hsr_slave_0: entered promiscuous mode [ 109.765382][ T5829] hsr_slave_1: entered promiscuous mode [ 109.775338][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.783413][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.813635][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.834614][ T5827] hsr_slave_0: entered promiscuous mode [ 109.843803][ T5827] hsr_slave_1: entered promiscuous mode [ 109.851258][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 109.857510][ T5827] Cannot create hsr debugfs directory [ 109.869521][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.878368][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.907559][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.019078][ T5830] hsr_slave_0: entered promiscuous mode [ 110.026275][ T5830] hsr_slave_1: entered promiscuous mode [ 110.033544][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 110.039541][ T5830] Cannot create hsr debugfs directory [ 110.132363][ T5828] hsr_slave_0: entered promiscuous mode [ 110.139589][ T5828] hsr_slave_1: entered promiscuous mode [ 110.147429][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 110.154368][ T5828] Cannot create hsr debugfs directory [ 110.652022][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.668175][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.682834][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.708393][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.782946][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.800012][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.829631][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.853290][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.920279][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.936383][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.977927][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.992449][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.059390][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.080332][ T52] Bluetooth: hci0: command tx timeout [ 111.085826][ T52] Bluetooth: hci3: command tx timeout [ 111.094526][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.108837][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.131304][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.160992][ T52] Bluetooth: hci1: command tx timeout [ 111.171378][ T52] Bluetooth: hci2: command tx timeout [ 111.295461][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.383737][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.409529][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.434706][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.476118][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.485204][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.509532][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.518992][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.538296][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.555433][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.577375][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.585279][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.622722][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.630637][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.645685][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.653571][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.684273][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.692514][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.751856][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.857779][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.887657][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.927029][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.935633][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.956812][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.966048][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.530766][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.668626][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.716552][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.736616][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.755889][ T5827] veth0_vlan: entered promiscuous mode [ 112.797219][ T5827] veth1_vlan: entered promiscuous mode [ 112.893962][ T5829] veth0_vlan: entered promiscuous mode [ 112.918587][ T5830] veth0_vlan: entered promiscuous mode [ 112.938501][ T5829] veth1_vlan: entered promiscuous mode [ 112.962996][ T5830] veth1_vlan: entered promiscuous mode [ 112.972670][ T5827] veth0_macvtap: entered promiscuous mode [ 112.989059][ T5828] veth0_vlan: entered promiscuous mode [ 113.003135][ T5827] veth1_macvtap: entered promiscuous mode [ 113.046402][ T5828] veth1_vlan: entered promiscuous mode [ 113.066941][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.103085][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.137650][ T3499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.149283][ T5830] veth0_macvtap: entered promiscuous mode [ 113.161463][ T52] Bluetooth: hci3: command tx timeout [ 113.162318][ T5841] Bluetooth: hci0: command tx timeout [ 113.174550][ T5829] veth0_macvtap: entered promiscuous mode [ 113.187605][ T3499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.198788][ T3499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.219421][ T5830] veth1_macvtap: entered promiscuous mode [ 113.232339][ T3499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.249097][ T5829] veth1_macvtap: entered promiscuous mode [ 113.251407][ T52] Bluetooth: hci1: command tx timeout [ 113.261496][ T5841] Bluetooth: hci2: command tx timeout [ 113.324888][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.345942][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.412797][ T5828] veth0_macvtap: entered promiscuous mode [ 113.428026][ T5828] veth1_macvtap: entered promiscuous mode [ 113.438289][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.451404][ T1100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.461359][ T1100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.486609][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.496090][ T1117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.498008][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.506726][ T1117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.520071][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.572890][ T3499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.582085][ T3499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.615061][ T3499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.624260][ T3499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.654361][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.664258][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.674147][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.708212][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.785820][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.812523][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.843817][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.852897][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.869857][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.926036][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.934516][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.948902][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.992164][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.117988][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.134790][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.254562][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.270563][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.347339][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.398988][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.560703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.602786][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.671127][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.880712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 115.197882][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.242673][ T52] Bluetooth: hci3: command tx timeout [ 115.250204][ T52] Bluetooth: hci0: command tx timeout [ 115.325826][ T5841] Bluetooth: hci1: command tx timeout [ 115.326923][ T52] Bluetooth: hci2: command tx timeout [ 115.424187][ T5934] netlink: ct family unspecified [ 115.795628][ T5941] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5'. [ 116.766727][ T5941] kfence: disabled [ 116.826104][ T5945] futex_wake_op: syz.1.2 tries to shift op by -2048; fix this program [ 116.910626][ T5945] futex_wake_op: syz.1.2 tries to shift op by -2048; fix this program [ 117.541402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.552055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.590503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 117.880880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 118.711548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.717394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.220680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.230635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.601823][ T6023] Invalid ELF header magic: != ELF [ 127.165217][ T6089] usb usb36: usbfs: process 6089 (syz.3.26) did not claim interface 0 before use [ 127.585558][ T6089] hub 1-0:1.0: USB hub found [ 127.621522][ T6089] hub 1-0:1.0: 1 port detected [ 129.379717][ T6123] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.744108][ T6133] Invalid ELF header magic: != ELF [ 131.069850][ T6148] hub 1-0:1.0: USB hub found [ 131.126132][ T6148] hub 1-0:1.0: 1 port detected [ 132.221014][ T6168] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 132.235895][ T6168] FAULT_INJECTION: forcing a failure. [ 132.235895][ T6168] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 132.280270][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.2.40 Not tainted syzkaller #0 PREEMPT(full) [ 132.280304][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.280328][ T6168] Call Trace: [ 132.280337][ T6168] [ 132.280346][ T6168] dump_stack_lvl+0x16c/0x1f0 [ 132.280393][ T6168] should_fail_ex+0x512/0x640 [ 132.280422][ T6168] should_fail_alloc_page+0xe7/0x130 [ 132.280449][ T6168] prepare_alloc_pages+0x3c2/0x610 [ 132.280481][ T6168] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 132.280516][ T6168] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 132.280558][ T6168] ? __lock_acquire+0x622/0x1c90 [ 132.280587][ T6168] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.280621][ T6168] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.280667][ T6168] ? is_bpf_text_address+0x8a/0x1a0 [ 132.280699][ T6168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.280734][ T6168] ? policy_nodemask+0xea/0x4e0 [ 132.280760][ T6168] alloc_pages_mpol+0x1fb/0x550 [ 132.280786][ T6168] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 132.280817][ T6168] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.280857][ T6168] ? find_held_lock+0x2b/0x80 [ 132.280908][ T6168] alloc_pages_noprof+0x131/0x390 [ 132.280939][ T6168] __pmd_alloc+0x3b/0x8b0 [ 132.280962][ T6168] ? __pud_alloc+0x51f/0x6b0 [ 132.280988][ T6168] copy_page_range+0x46c5/0x6930 [ 132.281053][ T6168] ? __pfx_copy_page_range+0x10/0x10 [ 132.281086][ T6168] ? mas_store+0x860/0x1030 [ 132.281108][ T6168] ? __pfx___might_resched+0x10/0x10 [ 132.281145][ T6168] ? find_held_lock+0x2b/0x80 [ 132.281179][ T6168] ? __pfx_mas_store+0x10/0x10 [ 132.281201][ T6168] ? __vma_enter_locked+0x163/0x3f0 [ 132.281255][ T6168] dup_mmap+0xe80/0x2280 [ 132.281293][ T6168] ? __pfx_dup_mmap+0x10/0x10 [ 132.281339][ T6168] copy_process+0x3f0c/0x76a0 [ 132.281375][ T6168] ? __pfx_copy_process+0x10/0x10 [ 132.281414][ T6168] ? futex_private_hash_put+0x176/0x300 [ 132.281460][ T6168] ? futex_private_hash_put+0x18a/0x300 [ 132.281506][ T6168] kernel_clone+0xfc/0x930 [ 132.281528][ T6168] ? __pfx_futex_wake+0x10/0x10 [ 132.281557][ T6168] ? __pfx_kernel_clone+0x10/0x10 [ 132.281597][ T6168] __do_sys_clone+0xce/0x120 [ 132.281618][ T6168] ? __pfx___do_sys_clone+0x10/0x10 [ 132.281655][ T6168] ? xfd_validate_state+0x61/0x180 [ 132.281693][ T6168] do_syscall_64+0xcd/0xfa0 [ 132.281733][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.281758][ T6168] RIP: 0033:0x7fa37638efc9 [ 132.281787][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.281811][ T6168] RSP: 002b:00007fa377269fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 132.281834][ T6168] RAX: ffffffffffffffda RBX: 00007fa3765e5fa0 RCX: 00007fa37638efc9 [ 132.281850][ T6168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020a08200 [ 132.281864][ T6168] RBP: 00007fa376411f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.281879][ T6168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.281893][ T6168] R13: 00007fa3765e6038 R14: 00007fa3765e5fa0 R15: 00007ffc915642b8 [ 132.281925][ T6168] [ 133.189462][ T6180] FAULT_INJECTION: forcing a failure. [ 133.189462][ T6180] name failslab, interval 1, probability 0, space 0, times 1 [ 133.234354][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 133.234397][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.234423][ T6180] Call Trace: [ 133.234434][ T6180] [ 133.234446][ T6180] dump_stack_lvl+0x16c/0x1f0 [ 133.234503][ T6180] should_fail_ex+0x512/0x640 [ 133.234533][ T6180] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 133.234586][ T6180] should_failslab+0xc2/0x120 [ 133.234620][ T6180] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 133.234664][ T6180] ? d_lookup+0xe7/0x190 [ 133.234700][ T6180] ? alloc_inode+0x64/0x240 [ 133.234740][ T6180] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 133.234779][ T6180] ? alloc_inode+0x64/0x240 [ 133.234811][ T6180] alloc_inode+0x64/0x240 [ 133.234844][ T6180] new_inode+0x22/0x1c0 [ 133.234882][ T6180] __debugfs_create_file+0x11c/0x6b0 [ 133.234932][ T6180] debugfs_create_file_full+0x41/0x60 [ 133.234980][ T6180] kvm_dev_ioctl+0x1708/0x1a80 [ 133.235066][ T6180] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 133.235133][ T6180] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 133.235188][ T6180] __x64_sys_ioctl+0x18e/0x210 [ 133.235231][ T6180] do_syscall_64+0xcd/0xfa0 [ 133.235290][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.235323][ T6180] RIP: 0033:0x7fc4d0d8efc9 [ 133.235349][ T6180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.235381][ T6180] RSP: 002b:00007fc4cefd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.235418][ T6180] RAX: ffffffffffffffda RBX: 00007fc4d0fe6180 RCX: 00007fc4d0d8efc9 [ 133.235439][ T6180] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 133.235459][ T6180] RBP: 00007fc4d0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.235479][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.235499][ T6180] R13: 00007fc4d0fe6218 R14: 00007fc4d0fe6180 R15: 00007ffe80727e88 [ 133.235545][ T6180] [ 133.550078][ T6180] debugfs: out of free dentries, can not create file 'halt_poll_success_hist' [ 133.666127][ T6170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.732148][ T6186] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 134.708503][ T3034] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.102403][ T3034] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.343186][ T1117] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.684014][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.693270][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.703963][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.712351][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.744387][ T3034] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.755463][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.905911][ T3034] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.788933][ T3034] bridge_slave_1: left allmulticast mode [ 137.240821][ T3034] bridge_slave_1: left promiscuous mode [ 137.278345][ T3034] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.333736][ T3034] bridge_slave_0: left allmulticast mode [ 137.369257][ T3034] bridge_slave_0: left promiscuous mode [ 137.378532][ T3034] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.800361][ T5841] Bluetooth: hci2: command tx timeout [ 137.844734][ T6246] Format for deleting device is "id" (uint). [ 137.879708][ T6246] FAULT_INJECTION: forcing a failure. [ 137.879708][ T6246] name failslab, interval 1, probability 0, space 0, times 0 [ 137.907948][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 137.907981][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.907995][ T6246] Call Trace: [ 137.908002][ T6246] [ 137.908012][ T6246] dump_stack_lvl+0x16c/0x1f0 [ 137.908053][ T6246] should_fail_ex+0x512/0x640 [ 137.908081][ T6246] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 137.908118][ T6246] should_failslab+0xc2/0x120 [ 137.908142][ T6246] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 137.908176][ T6246] ? __d_alloc+0x32/0xae0 [ 137.908216][ T6246] ? __d_alloc+0x32/0xae0 [ 137.908250][ T6246] __d_alloc+0x32/0xae0 [ 137.908295][ T6246] d_alloc_pseudo+0x1c/0xc0 [ 137.908320][ T6246] alloc_file_pseudo+0xcf/0x230 [ 137.908348][ T6246] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 137.908374][ T6246] ? alloc_fd+0x471/0x7d0 [ 137.908410][ T6246] sock_alloc_file+0x50/0x210 [ 137.908434][ T6246] __sys_socket+0x1c0/0x260 [ 137.908464][ T6246] ? __pfx___sys_socket+0x10/0x10 [ 137.908492][ T6246] ? xfd_validate_state+0x61/0x180 [ 137.908526][ T6246] __x64_sys_socket+0x72/0xb0 [ 137.908554][ T6246] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.908590][ T6246] do_syscall_64+0xcd/0xfa0 [ 137.908629][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.908652][ T6246] RIP: 0033:0x7fc4d0d8efc9 [ 137.908671][ T6246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.908694][ T6246] RSP: 002b:00007fc4d1b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 137.908715][ T6246] RAX: ffffffffffffffda RBX: 00007fc4d0fe5fa0 RCX: 00007fc4d0d8efc9 [ 137.908730][ T6246] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 137.908744][ T6246] RBP: 00007fc4d0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 137.908757][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.908771][ T6246] R13: 00007fc4d0fe6038 R14: 00007fc4d0fe5fa0 R15: 00007ffe80727e88 [ 137.908801][ T6246] [ 138.842757][ T3034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.869700][ T3034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.911995][ T3034] bond0 (unregistering): Released all slaves [ 139.371078][ T6268] vhci_hcd: invalid port number 16 [ 139.885764][ T5841] Bluetooth: hci2: command tx timeout [ 140.080993][ T6204] chnl_net:caif_netlink_parms(): no params data found [ 140.228140][ T6280] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 140.244237][ T6279] FAULT_INJECTION: forcing a failure. [ 140.244237][ T6279] name failslab, interval 1, probability 0, space 0, times 0 [ 140.258917][ T3034] hsr_slave_0: left promiscuous mode [ 140.280479][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT(full) [ 140.280521][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.280536][ T6279] Call Trace: [ 140.280543][ T6279] [ 140.280552][ T6279] dump_stack_lvl+0x16c/0x1f0 [ 140.280593][ T6279] should_fail_ex+0x512/0x640 [ 140.280615][ T6279] ? __kmalloc_noprof+0xca/0x880 [ 140.280648][ T6279] should_failslab+0xc2/0x120 [ 140.280672][ T6279] __kmalloc_noprof+0xdd/0x880 [ 140.280702][ T6279] ? handler_new_ref+0x1b0/0xc60 [ 140.280738][ T6279] ? handler_new_ref+0x1b0/0xc60 [ 140.280767][ T6279] ? handler_new_ref+0x827/0xc60 [ 140.280795][ T6279] handler_new_ref+0x1b0/0xc60 [ 140.280834][ T6279] v4l2_ctrl_new+0x196c/0x2190 [ 140.280876][ T6279] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 140.280916][ T6279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.280959][ T6279] v4l2_ctrl_new_std+0x1be/0x290 [ 140.281000][ T6279] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 140.281032][ T6279] ? rcu_is_watching+0x12/0xc0 [ 140.281066][ T6279] ? trace_kmalloc+0x2b/0xd0 [ 140.281086][ T6279] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 140.281124][ T6279] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 140.281159][ T6279] ? media_request_object_init+0x100/0x180 [ 140.281187][ T6279] vicodec_open+0x1b2/0xf70 [ 140.281209][ T6279] ? kobject_get_unless_zero+0x156/0x1e0 [ 140.281237][ T6279] v4l2_open+0x1d2/0x5e0 [ 140.281263][ T6279] ? __pfx_v4l2_open+0x10/0x10 [ 140.281288][ T6279] chrdev_open+0x234/0x6a0 [ 140.281324][ T6279] ? __pfx_apparmor_file_open+0x10/0x10 [ 140.281351][ T6279] ? __pfx_chrdev_open+0x10/0x10 [ 140.281389][ T6279] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 140.281429][ T6279] do_dentry_open+0x982/0x1530 [ 140.281466][ T6279] ? __pfx_chrdev_open+0x10/0x10 [ 140.281509][ T6279] vfs_open+0x82/0x3f0 [ 140.281537][ T6279] path_openat+0x1de4/0x2cb0 [ 140.281580][ T6279] ? __pfx_path_openat+0x10/0x10 [ 140.281616][ T6279] ? __lock_acquire+0xb8a/0x1c90 [ 140.281643][ T6279] do_filp_open+0x20b/0x470 [ 140.281677][ T6279] ? __pfx_do_filp_open+0x10/0x10 [ 140.281732][ T6279] ? alloc_fd+0x471/0x7d0 [ 140.281772][ T6279] do_sys_openat2+0x11b/0x1d0 [ 140.281797][ T6279] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.281835][ T6279] __x64_sys_openat+0x174/0x210 [ 140.281862][ T6279] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.281901][ T6279] do_syscall_64+0xcd/0xfa0 [ 140.281940][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.281969][ T6279] RIP: 0033:0x7fa37638efc9 [ 140.281989][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.282011][ T6279] RSP: 002b:00007fa377249038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.282032][ T6279] RAX: ffffffffffffffda RBX: 00007fa3765e6090 RCX: 00007fa37638efc9 [ 140.282048][ T6279] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 140.282062][ T6279] RBP: 00007fa376411f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.282076][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.282090][ T6279] R13: 00007fa3765e6128 R14: 00007fa3765e6090 R15: 00007ffc915642b8 [ 140.282121][ T6279] [ 140.284725][ T3034] hsr_slave_1: left promiscuous mode [ 140.616753][ T3034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.628598][ T3034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.638807][ T3034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.646992][ T3034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.720926][ T3034] veth1_macvtap: left promiscuous mode [ 140.727758][ T3034] veth0_macvtap: left promiscuous mode [ 140.735920][ T3034] veth1_vlan: left promiscuous mode [ 140.745637][ T3034] veth0_vlan: left promiscuous mode [ 141.598571][ T3034] team0 (unregistering): Port device team_slave_1 removed [ 141.645809][ T3034] team0 (unregistering): Port device team_slave_0 removed [ 141.970015][ T5841] Bluetooth: hci2: command tx timeout [ 142.457762][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.481857][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.512380][ T6204] bridge_slave_0: entered allmulticast mode [ 142.531037][ T6204] bridge_slave_0: entered promiscuous mode [ 142.560838][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.578106][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.628176][ T6204] bridge_slave_1: entered allmulticast mode [ 142.661006][ T6204] bridge_slave_1: entered promiscuous mode [ 142.661246][ T6315] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 142.715216][ T6315] Zero length message leads to an empty skb [ 142.843381][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.876348][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.008202][ T6318] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 143.056511][ T6321] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 143.067622][ T6324] Line length is too long: Should be less than 4094 [ 143.077875][ T6321] Line length is too long: Should be less than 4094 [ 143.156076][ T6204] team0: Port device team_slave_0 added [ 143.183959][ T6204] team0: Port device team_slave_1 added [ 143.410346][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.410482][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.043585][ T5841] Bluetooth: hci2: command tx timeout [ 144.343796][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.370659][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.431608][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.609058][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.647542][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.710685][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.311084][ T6204] hsr_slave_0: entered promiscuous mode [ 145.318719][ T6204] hsr_slave_1: entered promiscuous mode [ 147.212627][ T30] audit: type=1804 audit(1760821174.696:2): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.72" name="/newroot/26/file0" dev="tmpfs" ino=157 res=1 errno=0 [ 147.342919][ T6204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.431881][ T6204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.477792][ T30] audit: type=1804 audit(1760821174.966:3): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.72" name="/newroot/26/file0" dev="tmpfs" ino=157 res=1 errno=0 [ 147.519732][ T6204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.535338][ T30] audit: type=1800 audit(1760821174.996:4): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.72" name="file0" dev="tmpfs" ino=157 res=0 errno=0 [ 147.720864][ T6204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.241570][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.262539][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.331444][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.338611][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.477810][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.485221][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.208562][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.267007][ T6454] process 'syz.2.84' launched ':,' with NULL argv: empty string added [ 150.289102][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 150.389506][ T6459] hub 8-0:1.0: USB hub found [ 150.395941][ T6459] hub 8-0:1.0: 1 port detected [ 150.396114][ T6204] veth0_vlan: entered promiscuous mode [ 150.423105][ T6459] random: crng reseeded on system resumption [ 150.468560][ T6204] veth1_vlan: entered promiscuous mode [ 150.577247][ T6204] veth0_macvtap: entered promiscuous mode [ 150.592761][ T6204] veth1_macvtap: entered promiscuous mode [ 150.614890][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.663655][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.756505][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.802997][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.822768][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.853344][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.047082][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.078283][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.278447][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.315273][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.723786][ T6491] __vm_enough_memory: pid: 6491, comm: syz.1.45, bytes: 4398046511104 not enough memory for the allocation [ 152.569442][ T6510] program syz.1.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.581593][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.93'. [ 154.055667][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.102'. [ 154.068340][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.081264][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.117666][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.193739][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.050119][ T6582] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 155.968261][ T6601] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 334.476525][ T9633] ima: policy update failed [ 334.503586][ T30] audit: type=1802 audit(4294967298.620:9): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.592" res=0 errno=0 [ 334.782361][ T9652] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.594: iget: checksum invalid [ 334.926632][ T9652] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 335.000471][ T9652] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.594: iget: checksum invalid [ 335.111545][ T9652] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 335.197395][ T9652] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.594: iget: checksum invalid [ 335.283327][ T9652] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 335.340367][ T9652] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.594: iget: checksum invalid [ 335.406328][ T9652] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 335.446274][ T9652] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 335.479937][ T9652] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 339.000265][ T9684] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 339.007075][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 339.196161][ T9684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.233489][ T9684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.239578][ T9684] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.301765][ T9684] CPU0 is offline. [ 340.761231][ T9744] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.612: iget: checksum invalid [ 340.937576][ T9744] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 341.019320][ T9744] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.612: iget: checksum invalid [ 341.080104][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 341.096292][ T9744] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 341.192035][ T9744] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.612: iget: checksum invalid [ 341.317131][ T9744] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 341.331990][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.340705][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 341.488009][ T9744] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.612: iget: checksum invalid [ 341.639250][ T9744] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 341.674987][ T5149] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 341.810431][ T9744] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 341.920119][ T9744] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 342.412308][ T9769] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 342.412308][ T9769] program syz.1.617 not setting count and/or reply_len properly [ 343.120261][ T9769] netlink: 338 bytes leftover after parsing attributes in process `syz.1.617'. [ 343.219860][ T9774] netlink: 338 bytes leftover after parsing attributes in process `syz.1.617'. [ 345.707797][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 346.055803][ T9807] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.625: iget: checksum invalid [ 346.128944][ T9807] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 346.202415][ T9807] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.625: iget: checksum invalid [ 346.260248][ T9807] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 346.383801][ T9807] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.625: iget: checksum invalid [ 346.481575][ T9807] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 346.550243][ T9807] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.625: iget: checksum invalid [ 346.595688][ T9807] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 346.676468][ T9807] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 346.819390][ T9807] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 348.159116][ T9833] FAULT_INJECTION: forcing a failure. [ 348.159116][ T9833] name failslab, interval 1, probability 0, space 0, times 0 [ 348.257982][ T9833] CPU: 1 UID: 0 PID: 9833 Comm: syz.1.640 Not tainted syzkaller #0 PREEMPT(full) [ 348.258015][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.258029][ T9833] Call Trace: [ 348.258037][ T9833] [ 348.258045][ T9833] dump_stack_lvl+0x16c/0x1f0 [ 348.258087][ T9833] should_fail_ex+0x512/0x640 [ 348.258108][ T9833] ? fs_reclaim_acquire+0xae/0x150 [ 348.258133][ T9833] should_failslab+0xc2/0x120 [ 348.258156][ T9833] kmem_cache_alloc_noprof+0x75/0x6e0 [ 348.258188][ T9833] ? __kernfs_new_node+0xd2/0x8e0 [ 348.258215][ T9833] ? __kernfs_new_node+0xd2/0x8e0 [ 348.258234][ T9833] __kernfs_new_node+0xd2/0x8e0 [ 348.258282][ T9833] ? __pfx___kernfs_new_node+0x10/0x10 [ 348.258329][ T9833] ? find_held_lock+0x2b/0x80 [ 348.258363][ T9833] ? kernfs_root+0xee/0x2a0 [ 348.258390][ T9833] kernfs_new_node+0x13c/0x1e0 [ 348.258421][ T9833] kernfs_create_dir_ns+0x4c/0x1a0 [ 348.258455][ T9833] internal_create_group+0x34d/0xf30 [ 348.258487][ T9833] ? __pfx_internal_create_group+0x10/0x10 [ 348.258515][ T9833] ? kernfs_create_link+0x1bd/0x240 [ 348.258551][ T9833] internal_create_groups+0x9d/0x150 [ 348.258578][ T9833] device_add+0x731/0x1aa0 [ 348.258604][ T9833] ? __pfx_device_add+0x10/0x10 [ 348.258623][ T9833] ? __pfx___might_resched+0x10/0x10 [ 348.258656][ T9833] ? is_dynamic_key+0xb4/0x160 [ 348.258689][ T9833] __add_disk+0x457/0xf00 [ 348.258734][ T9833] add_disk_fwnode+0x13f/0x5d0 [ 348.258775][ T9833] nbd_dev_add+0x783/0xbb0 [ 348.258811][ T9833] ? __pfx_nbd_dev_add+0x10/0x10 [ 348.258864][ T9833] ? bpf_lsm_capable+0x9/0x10 [ 348.258888][ T9833] ? __radix_tree_lookup+0x21f/0x2c0 [ 348.258925][ T9833] nbd_genl_connect+0x8b0/0x1c60 [ 348.258968][ T9833] ? __pfx_nbd_genl_connect+0x10/0x10 [ 348.259007][ T9833] ? __nla_parse+0x40/0x60 [ 348.259038][ T9833] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 348.259068][ T9833] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 348.259104][ T9833] genl_family_rcv_msg_doit+0x209/0x2f0 [ 348.259133][ T9833] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 348.259161][ T9833] ? genl_get_cmd+0x194/0x580 [ 348.259195][ T9833] ? __radix_tree_lookup+0x21f/0x2c0 [ 348.259231][ T9833] genl_rcv_msg+0x55c/0x800 [ 348.259386][ T9833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.259416][ T9833] ? __pfx_nbd_genl_connect+0x10/0x10 [ 348.259466][ T9833] netlink_rcv_skb+0x158/0x420 [ 348.259489][ T9833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.259518][ T9833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.259553][ T9833] ? netlink_deliver_tap+0x1ae/0xd30 [ 348.259596][ T9833] genl_rcv+0x28/0x40 [ 348.259619][ T9833] netlink_unicast+0x5aa/0x870 [ 348.259652][ T9833] ? __pfx_netlink_unicast+0x10/0x10 [ 348.259687][ T9833] netlink_sendmsg+0x8c8/0xdd0 [ 348.259715][ T9833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.259742][ T9833] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 348.259774][ T9833] ____sys_sendmsg+0xa98/0xc70 [ 348.259803][ T9833] ? copy_msghdr_from_user+0x10a/0x160 [ 348.259840][ T9833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.259902][ T9833] ? __pfx_futex_wake_mark+0x10/0x10 [ 348.259938][ T9833] ___sys_sendmsg+0x134/0x1d0 [ 348.259982][ T9833] ? futex_private_hash_put+0x176/0x300 [ 348.260024][ T9833] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.260060][ T9833] ? __lock_acquire+0x622/0x1c90 [ 348.260121][ T9833] __sys_sendmsg+0x16d/0x220 [ 348.260160][ T9833] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.260196][ T9833] ? __x64_sys_futex+0x1e0/0x4c0 [ 348.260241][ T9833] do_syscall_64+0xcd/0xfa0 [ 348.260282][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.260307][ T9833] RIP: 0033:0x7f327258efc9 [ 348.260326][ T9833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.260350][ T9833] RSP: 002b:00007f32733dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.260373][ T9833] RAX: ffffffffffffffda RBX: 00007f32727e5fa0 RCX: 00007f327258efc9 [ 348.260389][ T9833] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 348.260404][ T9833] RBP: 00007f3272611f91 R08: 0000000000000000 R09: 0000000000000000 [ 348.260419][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.260434][ T9833] R13: 00007f32727e6038 R14: 00007f32727e5fa0 R15: 00007ffcdf82d228 [ 348.260475][ T9833] [ 350.544235][ T9833] nbd: failed to add new device [ 351.551953][ T9883] phram: not enough arguments [ 352.065800][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 355.013638][ T9940] FAULT_INJECTION: forcing a failure. [ 355.013638][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 355.089970][ T9940] CPU: 1 UID: 0 PID: 9940 Comm: syz.4.648 Not tainted syzkaller #0 PREEMPT(full) [ 355.090001][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.090015][ T9940] Call Trace: [ 355.090023][ T9940] [ 355.090031][ T9940] dump_stack_lvl+0x16c/0x1f0 [ 355.090071][ T9940] should_fail_ex+0x512/0x640 [ 355.090092][ T9940] ? fs_reclaim_acquire+0xae/0x150 [ 355.090117][ T9940] should_failslab+0xc2/0x120 [ 355.090140][ T9940] kmem_cache_alloc_noprof+0x75/0x6e0 [ 355.090172][ T9940] ? __kernfs_new_node+0xd2/0x8e0 [ 355.090199][ T9940] ? __kernfs_new_node+0xd2/0x8e0 [ 355.090217][ T9940] __kernfs_new_node+0xd2/0x8e0 [ 355.090241][ T9940] ? __pfx___kernfs_new_node+0x10/0x10 [ 355.090286][ T9940] ? find_held_lock+0x2b/0x80 [ 355.090319][ T9940] ? kernfs_root+0xee/0x2a0 [ 355.090345][ T9940] kernfs_new_node+0x13c/0x1e0 [ 355.090376][ T9940] __kernfs_create_file+0x53/0x350 [ 355.090410][ T9940] sysfs_add_file_mode_ns+0x207/0x3c0 [ 355.090454][ T9940] internal_create_group+0x578/0xf30 [ 355.090483][ T9940] ? __pfx_internal_create_group+0x10/0x10 [ 355.090510][ T9940] ? kernfs_create_link+0x1bd/0x240 [ 355.090546][ T9940] internal_create_groups+0x9d/0x150 [ 355.090572][ T9940] device_add+0x731/0x1aa0 [ 355.090597][ T9940] ? __pfx_device_add+0x10/0x10 [ 355.090623][ T9940] ? __pfx___might_resched+0x10/0x10 [ 355.090656][ T9940] ? is_dynamic_key+0xb4/0x160 [ 355.090689][ T9940] __add_disk+0x457/0xf00 [ 355.090732][ T9940] add_disk_fwnode+0x13f/0x5d0 [ 355.090772][ T9940] nbd_dev_add+0x783/0xbb0 [ 355.090808][ T9940] ? __pfx_nbd_dev_add+0x10/0x10 [ 355.090858][ T9940] ? bpf_lsm_capable+0x9/0x10 [ 355.090882][ T9940] ? __radix_tree_lookup+0x21f/0x2c0 [ 355.090919][ T9940] nbd_genl_connect+0x8b0/0x1c60 [ 355.090960][ T9940] ? __pfx_nbd_genl_connect+0x10/0x10 [ 355.090997][ T9940] ? __nla_parse+0x40/0x60 [ 355.091027][ T9940] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 355.091057][ T9940] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 355.091092][ T9940] genl_family_rcv_msg_doit+0x209/0x2f0 [ 355.091121][ T9940] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 355.091148][ T9940] ? genl_get_cmd+0x194/0x580 [ 355.091180][ T9940] ? __radix_tree_lookup+0x21f/0x2c0 [ 355.091215][ T9940] genl_rcv_msg+0x55c/0x800 [ 355.091245][ T9940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.091271][ T9940] ? __pfx_nbd_genl_connect+0x10/0x10 [ 355.091318][ T9940] netlink_rcv_skb+0x158/0x420 [ 355.091340][ T9940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.091367][ T9940] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.091401][ T9940] ? netlink_deliver_tap+0x1ae/0xd30 [ 355.091442][ T9940] genl_rcv+0x28/0x40 [ 355.091463][ T9940] netlink_unicast+0x5aa/0x870 [ 355.091489][ T9940] ? __pfx_netlink_unicast+0x10/0x10 [ 355.091522][ T9940] netlink_sendmsg+0x8c8/0xdd0 [ 355.091548][ T9940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.091574][ T9940] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 355.091610][ T9940] ____sys_sendmsg+0xa98/0xc70 [ 355.091639][ T9940] ? copy_msghdr_from_user+0x10a/0x160 [ 355.091676][ T9940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.091711][ T9940] ? __pfx_futex_wake_mark+0x10/0x10 [ 355.091744][ T9940] ___sys_sendmsg+0x134/0x1d0 [ 355.091796][ T9940] ? futex_private_hash_put+0x176/0x300 [ 355.091837][ T9940] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.091873][ T9940] ? __lock_acquire+0x622/0x1c90 [ 355.091934][ T9940] __sys_sendmsg+0x16d/0x220 [ 355.091974][ T9940] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.092011][ T9940] ? __x64_sys_futex+0x1e0/0x4c0 [ 355.092054][ T9940] do_syscall_64+0xcd/0xfa0 [ 355.092094][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.092118][ T9940] RIP: 0033:0x7fa5d138efc9 [ 355.092138][ T9940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.092161][ T9940] RSP: 002b:00007fa5d215e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.092183][ T9940] RAX: ffffffffffffffda RBX: 00007fa5d15e5fa0 RCX: 00007fa5d138efc9 [ 355.092199][ T9940] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 355.092213][ T9940] RBP: 00007fa5d1411f91 R08: 0000000000000000 R09: 0000000000000000 [ 355.092227][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.092241][ T9940] R13: 00007fa5d15e6038 R14: 00007fa5d15e5fa0 R15: 00007ffddefa9728 [ 355.092273][ T9940] [ 356.009754][ T9945] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 356.027867][ T9945] netlink: 322 bytes leftover after parsing attributes in process `syz.2.650'. [ 356.048179][ T9945] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 356.066132][ T9945] netlink: 322 bytes leftover after parsing attributes in process `syz.2.650'. [ 356.235048][ T9940] nbd: failed to add new device [ 364.382376][T10088] ubi0: attaching mtd0 [ 364.421449][T10088] ubi0: scanning is finished [ 364.465253][T10088] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 364.754005][T10088] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 366.169227][T10112] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 366.796994][ T8919] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:15: bg 2: bad block bitmap checksum [ 366.880816][ T8919] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 13 with max blocks 49 with error 74 [ 366.953294][ T8919] EXT4-fs (sda1): This should not happen!! Data will be lost [ 366.953294][ T8919] [ 367.411617][T10138] netlink: 342 bytes leftover after parsing attributes in process `syz.0.691'. [ 368.930782][T10155] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 369.026833][T10155] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 369.150155][T10155] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 369.389888][T10168] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 369.781226][ T1117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.543816][ T1117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.695754][T10196] ubi0: attaching mtd0 [ 370.731353][T10196] ubi0: scanning is finished [ 370.736021][T10196] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 370.895327][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.905972][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.918265][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.929906][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.939066][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.103827][T10196] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 371.127206][ T1117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.382430][ T1117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.445696][T10204] FAULT_INJECTION: forcing a failure. [ 371.445696][T10204] name failslab, interval 1, probability 0, space 0, times 0 [ 371.589911][T10204] CPU: 1 UID: 0 PID: 10204 Comm: syz.0.701 Not tainted syzkaller #0 PREEMPT(full) [ 371.589943][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.589958][T10204] Call Trace: [ 371.589965][T10204] [ 371.589974][T10204] dump_stack_lvl+0x16c/0x1f0 [ 371.590016][T10204] should_fail_ex+0x512/0x640 [ 371.590038][T10204] ? fs_reclaim_acquire+0xae/0x150 [ 371.590064][T10204] should_failslab+0xc2/0x120 [ 371.590088][T10204] kmem_cache_alloc_noprof+0x75/0x6e0 [ 371.590119][T10204] ? __pfx_map_id_range_down+0x10/0x10 [ 371.590150][T10204] ? security_inode_alloc+0x3b/0x2b0 [ 371.590182][T10204] ? security_inode_alloc+0x3b/0x2b0 [ 371.590207][T10204] security_inode_alloc+0x3b/0x2b0 [ 371.590234][T10204] inode_init_always_gfp+0xce4/0x1030 [ 371.590273][T10204] alloc_inode+0x86/0x240 [ 371.590297][T10204] new_inode+0x22/0x1c0 [ 371.590322][T10204] proc_sys_make_inode+0x47/0x5c0 [ 371.590349][T10204] proc_sys_lookup+0x273/0x400 [ 371.590375][T10204] ? __pfx_proc_sys_lookup+0x10/0x10 [ 371.590403][T10204] ? __d_lookup+0x266/0x4a0 [ 371.590435][T10204] ? __pfx_proc_sys_lookup+0x10/0x10 [ 371.590464][T10204] lookup_open.isra.0+0x4da/0x1580 [ 371.590501][T10204] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 371.590548][T10204] ? mnt_get_write_access+0x1e9/0x2f0 [ 371.590578][T10204] path_openat+0x893/0x2cb0 [ 371.590622][T10204] ? __pfx_path_openat+0x10/0x10 [ 371.590658][T10204] ? __lock_acquire+0xb8a/0x1c90 [ 371.590686][T10204] do_filp_open+0x20b/0x470 [ 371.590721][T10204] ? __pfx_do_filp_open+0x10/0x10 [ 371.590777][T10204] ? alloc_fd+0x471/0x7d0 [ 371.590816][T10204] do_sys_openat2+0x11b/0x1d0 [ 371.590843][T10204] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.590881][T10204] __x64_sys_openat+0x174/0x210 [ 371.590909][T10204] ? __pfx___x64_sys_openat+0x10/0x10 [ 371.590949][T10204] do_syscall_64+0xcd/0xfa0 [ 371.590988][T10204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.591011][T10204] RIP: 0033:0x7f713d58efc9 [ 371.591030][T10204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.591054][T10204] RSP: 002b:00007f713e48c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.591076][T10204] RAX: ffffffffffffffda RBX: 00007f713d7e6090 RCX: 00007f713d58efc9 [ 371.591091][T10204] RDX: 0000000000080202 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 371.591106][T10204] RBP: 00007f713d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.591120][T10204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.591134][T10204] R13: 00007f713d7e6128 R14: 00007f713d7e6090 R15: 00007ffeb61b46e8 [ 371.591166][T10204] [ 372.807635][ T1117] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.002691][ T5149] Bluetooth: hci3: command tx timeout [ 373.429413][ T1117] bridge_slave_1: left allmulticast mode [ 373.465656][ T1117] bridge_slave_1: left promiscuous mode [ 373.511140][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.559547][ T1117] bridge_slave_0: left allmulticast mode [ 373.585660][ T1117] bridge_slave_0: left promiscuous mode [ 373.615625][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.080039][ T5149] Bluetooth: hci3: command tx timeout [ 375.953455][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.005476][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.046632][ T1117] bond0 (unregistering): Released all slaves [ 376.122718][T10200] chnl_net:caif_netlink_parms(): no params data found [ 376.395798][T10263] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 377.160135][ T5149] Bluetooth: hci3: command tx timeout [ 377.178241][ T1117] hsr_slave_0: left promiscuous mode [ 377.222050][ T1117] hsr_slave_1: left promiscuous mode [ 377.250152][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.289623][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.411483][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.446799][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.612352][ T1117] veth1_macvtap: left promiscuous mode [ 377.617907][ T1117] veth0_macvtap: left promiscuous mode [ 377.660203][ T1117] veth1_vlan: left promiscuous mode [ 377.689989][ T1117] veth0_vlan: left promiscuous mode [ 379.239964][ T5149] Bluetooth: hci3: command tx timeout [ 380.115377][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 380.373233][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 382.122388][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.129574][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.170654][T10200] bridge_slave_0: entered allmulticast mode [ 382.210383][T10200] bridge_slave_0: entered promiscuous mode [ 382.241357][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.253833][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.275924][T10200] bridge_slave_1: entered allmulticast mode [ 382.303458][T10200] bridge_slave_1: entered promiscuous mode [ 382.548246][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.716465][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.324551][T10200] team0: Port device team_slave_0 added [ 383.372937][T10200] team0: Port device team_slave_1 added [ 383.612519][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.654273][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.827257][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.911804][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.963817][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.091150][T10360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.149854][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.201830][T10360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.286864][T10360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.319889][T10360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.413327][T10360] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 384.504759][T10360] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 384.531622][T10200] hsr_slave_0: entered promiscuous mode [ 384.538064][T10200] hsr_slave_1: entered promiscuous mode [ 384.585290][T10200] debugfs: 'hsr0' already exists in 'hsr' [ 384.635081][T10360] CPU0 is offline. [ 384.641147][T10200] Cannot create hsr debugfs directory [ 384.858272][T10380] input: f as /devices/virtual/input/input9 [ 384.911568][T10380] MTRR 1 not used [ 385.048514][ T8918] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 4 with max blocks 1 with error 117 [ 385.134835][ T8918] EXT4-fs (sda1): This should not happen!! Data will be lost [ 385.134835][ T8918] [ 385.561709][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 386.120665][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 386.280322][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.361723][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 386.808153][T10200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 386.894290][T10200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.130492][T10200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.181046][T10200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.728850][T10200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.831502][T10200] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.921427][ T8918] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.928581][ T8918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.008539][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.015771][ T8919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.440367][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 389.115454][T10200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.184260][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.190920][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.360822][T10200] veth0_vlan: entered promiscuous mode [ 389.426597][T10200] veth1_vlan: entered promiscuous mode [ 389.583326][T10200] veth0_macvtap: entered promiscuous mode [ 389.654514][T10200] veth1_macvtap: entered promiscuous mode [ 389.745358][T10200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.798014][T10200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.870031][ T8919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.902908][ T8919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.955292][ T8919] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.020062][ T8919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.277352][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.319848][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.445453][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.483409][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.524521][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 391.157594][T10472] random: crng reseeded on system resumption [ 391.232060][T10477] sd 0:0:1:0: device reset [ 392.623979][T10503] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input10 [ 395.098096][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 397.870105][T10616] FAULT_INJECTION: forcing a failure. [ 397.870105][T10616] name failslab, interval 1, probability 0, space 0, times 0 [ 397.953821][T10616] CPU: 1 UID: 0 PID: 10616 Comm: syz.4.751 Not tainted syzkaller #0 PREEMPT(full) [ 397.953853][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 397.953868][T10616] Call Trace: [ 397.953876][T10616] [ 397.953884][T10616] dump_stack_lvl+0x16c/0x1f0 [ 397.953925][T10616] should_fail_ex+0x512/0x640 [ 397.953947][T10616] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 397.953983][T10616] should_failslab+0xc2/0x120 [ 397.954010][T10616] kmem_cache_alloc_noprof+0x75/0x6e0 [ 397.954043][T10616] ? alloc_empty_file+0x55/0x1e0 [ 397.954073][T10616] ? alloc_empty_file+0x55/0x1e0 [ 397.954096][T10616] alloc_empty_file+0x55/0x1e0 [ 397.954122][T10616] path_openat+0xda/0x2cb0 [ 397.954165][T10616] ? __pfx_path_openat+0x10/0x10 [ 397.954201][T10616] ? __lock_acquire+0xb8a/0x1c90 [ 397.954229][T10616] do_filp_open+0x20b/0x470 [ 397.954264][T10616] ? __pfx_do_filp_open+0x10/0x10 [ 397.954319][T10616] ? alloc_fd+0x471/0x7d0 [ 397.954358][T10616] do_sys_openat2+0x11b/0x1d0 [ 397.954384][T10616] ? __pfx_do_sys_openat2+0x10/0x10 [ 397.954422][T10616] __x64_sys_openat+0x174/0x210 [ 397.954449][T10616] ? __pfx___x64_sys_openat+0x10/0x10 [ 397.954488][T10616] do_syscall_64+0xcd/0xfa0 [ 397.954527][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.954551][T10616] RIP: 0033:0x7fa5d138efc9 [ 397.954569][T10616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.954593][T10616] RSP: 002b:00007fa5d215e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 397.954615][T10616] RAX: ffffffffffffffda RBX: 00007fa5d15e5fa0 RCX: 00007fa5d138efc9 [ 397.954631][T10616] RDX: 0000000000000800 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 397.954646][T10616] RBP: 00007fa5d1411f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.954660][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.954680][T10616] R13: 00007fa5d15e6038 R14: 00007fa5d15e5fa0 R15: 00007ffddefa9728 [ 397.954710][T10616] [ 399.433370][T10624] Console: switching to colour frame buffer device 128x48 [ 399.473091][T10640] netlink: 342 bytes leftover after parsing attributes in process `syz.2.755'. [ 399.548759][T10640] netlink: 342 bytes leftover after parsing attributes in process `syz.2.755'. [ 401.492603][T10674] FAULT_INJECTION: forcing a failure. [ 401.492603][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 401.599906][T10674] CPU: 1 UID: 0 PID: 10674 Comm: syz.4.758 Not tainted syzkaller #0 PREEMPT(full) [ 401.599938][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.599952][T10674] Call Trace: [ 401.599960][T10674] [ 401.599969][T10674] dump_stack_lvl+0x16c/0x1f0 [ 401.600009][T10674] should_fail_ex+0x512/0x640 [ 401.600035][T10674] should_failslab+0xc2/0x120 [ 401.600058][T10674] kmem_cache_alloc_noprof+0x75/0x6e0 [ 401.600090][T10674] ? skb_clone+0x190/0x3f0 [ 401.600132][T10674] ? skb_clone+0x190/0x3f0 [ 401.600165][T10674] skb_clone+0x190/0x3f0 [ 401.600202][T10674] netlink_deliver_tap+0xabd/0xd30 [ 401.600245][T10674] netlink_unicast+0x64c/0x870 [ 401.600272][T10674] ? __pfx_netlink_unicast+0x10/0x10 [ 401.600293][T10674] ? __pfx___might_resched+0x10/0x10 [ 401.600326][T10674] ? __pfx_futex_wake_mark+0x10/0x10 [ 401.600363][T10674] netlink_sendmsg+0x8c8/0xdd0 [ 401.600390][T10674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.600416][T10674] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 401.600447][T10674] __sys_sendto+0x4a3/0x520 [ 401.600481][T10674] ? __pfx___sys_sendto+0x10/0x10 [ 401.600540][T10674] ? xfd_validate_state+0x61/0x180 [ 401.600570][T10674] __x64_sys_sendto+0xe0/0x1c0 [ 401.600602][T10674] ? do_syscall_64+0x91/0xfa0 [ 401.600637][T10674] ? lockdep_hardirqs_on+0x7c/0x110 [ 401.600675][T10674] do_syscall_64+0xcd/0xfa0 [ 401.600719][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.600742][T10674] RIP: 0033:0x7fa5d1390e5c [ 401.600760][T10674] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 401.600783][T10674] RSP: 002b:00007fa5d215cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 401.600804][T10674] RAX: ffffffffffffffda RBX: 00007fa5d215cfc0 RCX: 00007fa5d1390e5c [ 401.600820][T10674] RDX: 0000000000000020 RSI: 00007fa5d215d010 RDI: 0000000000000004 [ 401.600834][T10674] RBP: 0000000000000000 R08: 00007fa5d215cf14 R09: 000000000000000c [ 401.600848][T10674] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 401.600862][T10674] R13: 00007fa5d215cf68 R14: 00007fa5d215d010 R15: 0000000000000000 [ 401.600891][T10674] [ 401.824421][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.418339][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 405.209872][ T30] audit: type=1800 audit(4294967301.980:10): pid=10720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.764" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 405.970728][T10563] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1391 with max blocks 13 with error 117 [ 406.062809][T10563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 406.062809][T10563] [ 406.134129][T10563] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1388 with max blocks 3 with error 117 [ 406.269841][T10563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 406.269841][T10563] [ 406.440505][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1388 with max blocks 1 with error 117 [ 406.571417][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 406.571417][ T36] [ 408.182131][T10768] FAULT_INJECTION: forcing a failure. [ 408.182131][T10768] name failslab, interval 1, probability 0, space 0, times 0 [ 408.196437][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1366 with max blocks 22 with error 117 [ 408.281104][T10768] CPU: 1 UID: 0 PID: 10768 Comm: syz.4.769 Not tainted syzkaller #0 PREEMPT(full) [ 408.281136][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.281151][T10768] Call Trace: [ 408.281158][T10768] [ 408.281167][T10768] dump_stack_lvl+0x16c/0x1f0 [ 408.281207][T10768] should_fail_ex+0x512/0x640 [ 408.281230][T10768] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 408.281266][T10768] should_failslab+0xc2/0x120 [ 408.281290][T10768] kmem_cache_alloc_noprof+0x75/0x6e0 [ 408.281322][T10768] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 408.281356][T10768] ? alloc_empty_file+0x55/0x1e0 [ 408.281387][T10768] ? alloc_empty_file+0x55/0x1e0 [ 408.281410][T10768] alloc_empty_file+0x55/0x1e0 [ 408.281436][T10768] path_openat+0xda/0x2cb0 [ 408.281480][T10768] ? __pfx_path_openat+0x10/0x10 [ 408.281517][T10768] ? __lock_acquire+0xb8a/0x1c90 [ 408.281545][T10768] do_filp_open+0x20b/0x470 [ 408.281581][T10768] ? __pfx_do_filp_open+0x10/0x10 [ 408.281636][T10768] ? alloc_fd+0x471/0x7d0 [ 408.281677][T10768] do_sys_openat2+0x11b/0x1d0 [ 408.281704][T10768] ? __pfx_do_sys_openat2+0x10/0x10 [ 408.281732][T10768] ? __pfx_sched_core_share_pid+0x10/0x10 [ 408.281777][T10768] __x64_sys_openat+0x174/0x210 [ 408.281805][T10768] ? __pfx___x64_sys_openat+0x10/0x10 [ 408.281845][T10768] do_syscall_64+0xcd/0xfa0 [ 408.281884][T10768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.281909][T10768] RIP: 0033:0x7fa5d138efc9 [ 408.281926][T10768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.281950][T10768] RSP: 002b:00007fa5d215e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 408.281972][T10768] RAX: ffffffffffffffda RBX: 00007fa5d15e5fa0 RCX: 00007fa5d138efc9 [ 408.281988][T10768] RDX: 0000000000000082 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 408.282003][T10768] RBP: 00007fa5d1411f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.282017][T10768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.282030][T10768] R13: 00007fa5d15e6038 R14: 00007fa5d15e5fa0 R15: 00007ffddefa9728 [ 408.282061][T10768] [ 408.282126][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 408.282126][ T36] [ 411.280958][T10804] ubi0: attaching mtd0 [ 411.304879][T10804] ubi0: scanning is finished [ 411.328635][T10804] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 411.544229][T10804] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 416.184192][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 416.572136][T10865] ubi0: attaching mtd0 [ 416.601084][T10865] ubi0: scanning is finished [ 416.605754][T10865] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 416.803481][T10865] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 419.200719][T10907] netlink: 11 bytes leftover after parsing attributes in process `syz.4.794'. [ 419.245526][T10907] netlink: 11 bytes leftover after parsing attributes in process `syz.4.794'. [ 422.685398][T10949] ubi0: attaching mtd0 [ 422.725998][T10949] ubi0: scanning is finished [ 422.773192][T10949] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 423.030864][T10949] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 425.385340][T11010] ubi0: attaching mtd0 [ 425.413605][T11010] ubi0: scanning is finished [ 425.459255][T11010] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 425.701102][T11010] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 426.902074][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'. [ 427.110514][T11044] zswap: compressor not available [ 429.350953][T11108] ubi0: attaching mtd0 [ 429.371412][T11108] ubi0: scanning is finished [ 429.419378][T11108] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 429.649726][T11108] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 429.827467][T11112] vhci_hcd: invalid port number 21 [ 432.031212][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 432.372303][T11133] bond0: (slave bond_slave_1): Releasing backup interface [ 432.771747][T11152] tipc: Started in network mode [ 432.799054][T11152] tipc: Node identity ee00, cluster identity 4711 [ 432.816919][T11153] ubi0: attaching mtd0 [ 432.839240][T11153] ubi0: scanning is finished [ 432.854990][T11152] tipc: Node number set to 60928 [ 432.872280][T11153] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 433.171089][T11153] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 433.711713][T11166] binder: 11161:11166 ioctl c0046209 ffffffffffffffff returned -22 [ 436.414555][T11232] ubi0: attaching mtd0 [ 436.440939][T11232] ubi0: scanning is finished [ 436.479117][T11232] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 436.694808][T11232] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 438.239965][T11265] __vm_enough_memory: pid: 11265, comm: syz.4.843, bytes: 4398046511104 not enough memory for the allocation [ 438.926357][T11279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.846'. [ 439.102932][T11279] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 440.983658][T11316] binder: 11315:11316 ioctl 5423 200000000340 returned -22 [ 441.021090][T11316] binder: 11315:11316 ioctl c00c6211 0 returned -14 [ 441.308113][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 443.898685][T11366] input: f as /devices/virtual/input/input11 [ 444.250086][T11370] ======================================================= [ 444.250086][T11370] WARNING: The mand mount option has been deprecated and [ 444.250086][T11370] and is ignored by this kernel. Remove the mand [ 444.250086][T11370] option from the mount to silence this warning. [ 444.250086][T11370] ======================================================= [ 444.284984][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.572249][T11375] futex_wake_op: syz.2.867 tries to shift op by -2048; fix this program [ 445.610518][T11378] netlink: 122 bytes leftover after parsing attributes in process `syz.1.866'. [ 445.642365][T11375] futex_wake_op: syz.2.867 tries to shift op by -2048; fix this program [ 450.023040][T11443] syz.2.879 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 450.606906][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.613386][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.016668][T11500] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 453.219946][T11500] File: /dev/ram7 PID: 11500 Comm: syz.4.887 [ 455.120540][T11556] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 455.642311][T11562] sysfs_service_op_show: Client not running :-5: [ 457.578570][T11599] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 457.694720][T11604] Process accounting resumed [ 458.285715][T11614] zswap: compressor not available [ 460.638045][T11637] kexec: Could not allocate control_code_buffer [ 461.679913][ T30] audit: type=1800 audit(4294967300.960:11): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.910" name="members" dev="configfs" ino=31667 res=0 errno=0 [ 462.661593][T11668] netlink: 342 bytes leftover after parsing attributes in process `syz.0.912'. [ 469.336088][T11760] FAULT_INJECTION: forcing a failure. [ 469.336088][T11760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.420007][T11760] CPU: 1 UID: 0 PID: 11760 Comm: syz.0.932 Not tainted syzkaller #0 PREEMPT(full) [ 469.420047][T11760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 469.420062][T11760] Call Trace: [ 469.420070][T11760] [ 469.420078][T11760] dump_stack_lvl+0x16c/0x1f0 [ 469.420119][T11760] should_fail_ex+0x512/0x640 [ 469.420146][T11760] _copy_from_user+0x2e/0xd0 [ 469.420171][T11760] move_addr_to_kernel+0x65/0x170 [ 469.420203][T11760] __sys_sendto+0x1be/0x520 [ 469.420238][T11760] ? __pfx___sys_sendto+0x10/0x10 [ 469.420281][T11760] ? find_held_lock+0x2b/0x80 [ 469.420336][T11760] __x64_sys_sendto+0xe0/0x1c0 [ 469.420369][T11760] ? do_syscall_64+0x91/0xfa0 [ 469.420406][T11760] ? lockdep_hardirqs_on+0x7c/0x110 [ 469.420442][T11760] do_syscall_64+0xcd/0xfa0 [ 469.420481][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.420507][T11760] RIP: 0033:0x7f713d590e5c [ 469.420525][T11760] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 469.420549][T11760] RSP: 002b:00007f713e48aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 469.420571][T11760] RAX: ffffffffffffffda RBX: 00007f713e48afc0 RCX: 00007f713d590e5c [ 469.420586][T11760] RDX: 0000000000000020 RSI: 00007f713e48b010 RDI: 0000000000000009 [ 469.420601][T11760] RBP: 0000000000000000 R08: 00007f713e48af14 R09: 000000000000000c [ 469.420615][T11760] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 469.420629][T11760] R13: 00007f713e48af68 R14: 00007f713e48b010 R15: 0000000000000000 [ 469.420659][T11760] [ 470.033744][T11771] netlink: 330 bytes leftover after parsing attributes in process `syz.0.934'. [ 470.745171][T11787] FAULT_INJECTION: forcing a failure. [ 470.745171][T11787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.819929][T11787] CPU: 1 UID: 0 PID: 11787 Comm: syz.1.938 Not tainted syzkaller #0 PREEMPT(full) [ 470.819963][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 470.819976][T11787] Call Trace: [ 470.819984][T11787] [ 470.819992][T11787] dump_stack_lvl+0x16c/0x1f0 [ 470.820029][T11787] should_fail_ex+0x512/0x640 [ 470.820052][T11787] _copy_from_user+0x2e/0xd0 [ 470.820074][T11787] memdup_user+0x6b/0xe0 [ 470.820105][T11787] strndup_user+0x78/0xe0 [ 470.820136][T11787] __x64_sys_fsopen+0x9c/0x240 [ 470.820158][T11787] do_syscall_64+0xcd/0xfa0 [ 470.820192][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.820213][T11787] RIP: 0033:0x7f327258efc9 [ 470.820230][T11787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.820251][T11787] RSP: 002b:00007f32733dc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 470.820271][T11787] RAX: ffffffffffffffda RBX: 00007f32727e5fa0 RCX: 00007f327258efc9 [ 470.820285][T11787] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 470.820297][T11787] RBP: 00007f32733dc090 R08: 0000000000000000 R09: 0000000000000000 [ 470.820309][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.820321][T11787] R13: 00007f32727e6038 R14: 00007f32727e5fa0 R15: 00007ffcdf82d228 [ 470.820348][T11787] [ 471.146725][T11785] Invalid ELF header magic: != ELF [ 472.009633][T11807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 472.027063][T11809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.942'. [ 472.477099][T11821] bridge0: port 3(gretap0) entered blocking state [ 472.560319][T11821] bridge0: port 3(gretap0) entered disabled state [ 472.601015][T11821] gretap0: entered allmulticast mode [ 472.644431][T11821] gretap0: entered promiscuous mode [ 472.707875][T11821] bridge0: port 3(gretap0) entered blocking state [ 472.714742][T11821] bridge0: port 3(gretap0) entered forwarding state [ 474.930769][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 476.534296][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 4 with max blocks 5 with error 117 [ 476.708614][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 476.708614][ T36] [ 477.135068][T11892] netlink: 342 bytes leftover after parsing attributes in process `syz.0.958'. [ 477.190340][T11895] netlink: 146 bytes leftover after parsing attributes in process `syz.0.958'. [ 477.928474][T10541] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.211346][T10541] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.819337][T10541] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.111261][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.121275][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.129365][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.138308][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.146794][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 479.356451][T10541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.045813][T10541] bridge_slave_1: left allmulticast mode [ 480.067038][T10541] bridge_slave_1: left promiscuous mode [ 480.110010][T10541] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.265205][T10541] bridge_slave_0: left allmulticast mode [ 480.309959][T10541] bridge_slave_0: left promiscuous mode [ 480.335820][T10541] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.183508][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 481.239906][ T5149] Bluetooth: hci0: command tx timeout [ 482.492277][T10541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.560980][T10541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.608641][T10541] bond0 (unregistering): Released all slaves [ 483.187588][T10541] tipc: Left network mode [ 483.322133][ T5149] Bluetooth: hci0: command tx timeout [ 483.586236][T11916] chnl_net:caif_netlink_parms(): no params data found [ 484.041621][T11972] futex_wake_op: syz.1.969 tries to shift op by -2048; fix this program [ 484.182369][T11970] 0x000000000001-0x000000020000 : "" [ 484.355854][T11970] ftl_cs: FTL header corrupt! [ 485.189531][T11916] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.202719][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.239637][T11916] bridge_slave_0: entered allmulticast mode [ 485.278657][T11916] bridge_slave_0: entered promiscuous mode [ 485.401152][ T5149] Bluetooth: hci0: command tx timeout [ 485.555992][T10541] hsr_slave_0: left promiscuous mode [ 485.607125][T10541] hsr_slave_1: left promiscuous mode [ 485.621432][T10541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.661391][T10541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.739626][T10541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.773571][T10541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.923058][T10541] veth1_macvtap: left promiscuous mode [ 485.954531][T10541] veth0_macvtap: left promiscuous mode [ 485.971841][T10541] veth1_vlan: left promiscuous mode [ 485.991515][T10541] veth0_vlan: left promiscuous mode [ 486.972870][T12020] ubi0: attaching mtd0 [ 487.013439][T12020] ubi0: scanning is finished [ 487.059801][T12020] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 487.308136][T12020] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 487.480235][ T5149] Bluetooth: hci0: command tx timeout [ 487.697234][T10541] team0 (unregistering): Port device team_slave_1 removed [ 487.911231][T10541] team0 (unregistering): Port device team_slave_0 removed [ 488.194977][T12028] FAULT_INJECTION: forcing a failure. [ 488.194977][T12028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.332011][T12028] CPU: 1 UID: 0 PID: 12028 Comm: syz.1.977 Not tainted syzkaller #0 PREEMPT(full) [ 488.332043][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.332057][T12028] Call Trace: [ 488.332064][T12028] [ 488.332073][T12028] dump_stack_lvl+0x16c/0x1f0 [ 488.332132][T12028] should_fail_ex+0x512/0x640 [ 488.332158][T12028] _copy_from_user+0x2e/0xd0 [ 488.332182][T12028] move_addr_to_kernel+0x65/0x170 [ 488.332214][T12028] __sys_sendto+0x1be/0x520 [ 488.332248][T12028] ? __pfx___sys_sendto+0x10/0x10 [ 488.332291][T12028] ? fd_install+0x225/0x750 [ 488.332334][T12028] ? __pfx___sys_socket+0x10/0x10 [ 488.332362][T12028] ? xfd_validate_state+0x61/0x180 [ 488.332393][T12028] __x64_sys_sendto+0xe0/0x1c0 [ 488.332426][T12028] ? do_syscall_64+0x91/0xfa0 [ 488.332461][T12028] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.332497][T12028] do_syscall_64+0xcd/0xfa0 [ 488.332535][T12028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.332558][T12028] RIP: 0033:0x7f3272590e5c [ 488.332576][T12028] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 488.332599][T12028] RSP: 002b:00007f32733daec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 488.332621][T12028] RAX: ffffffffffffffda RBX: 00007f32733dafc0 RCX: 00007f3272590e5c [ 488.332636][T12028] RDX: 0000000000000028 RSI: 00007f32733db010 RDI: 0000000000000009 [ 488.332651][T12028] RBP: 0000000000000000 R08: 00007f32733daf14 R09: 000000000000000c [ 488.332665][T12028] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 488.332678][T12028] R13: 00007f32733daf68 R14: 00007f32733db010 R15: 0000000000000000 [ 488.332708][T12028] [ 489.741414][T11916] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.748725][T11916] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.796662][T11916] bridge_slave_1: entered allmulticast mode [ 489.822100][T11916] bridge_slave_1: entered promiscuous mode [ 489.996292][T11916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.133987][T11916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.398485][T11916] team0: Port device team_slave_0 added [ 490.582902][T11916] team0: Port device team_slave_1 added [ 491.004106][T11916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.029921][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.155637][T11916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.224268][T11916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.249828][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.369990][T11916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.058702][T12067] ubi0: attaching mtd0 [ 492.086267][T11916] hsr_slave_0: entered promiscuous mode [ 492.101394][T12067] ubi0: scanning is finished [ 492.106092][T12067] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 492.151335][T11916] hsr_slave_1: entered promiscuous mode [ 492.157545][T11916] debugfs: 'hsr0' already exists in 'hsr' [ 492.189484][T11916] Cannot create hsr debugfs directory [ 492.302372][T12067] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 494.068310][T11916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 494.224199][T11916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 494.338126][T11916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 494.418445][T11916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 494.453535][T12107] sd 0:0:1:0: PR command failed: 1026 [ 494.484471][T12107] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 494.521880][T12107] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 494.942149][T11916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.074524][T11916] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.159768][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.166921][T10537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.318185][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.325384][T10543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.439805][ T30] audit: type=1326 audit(4294967298.110:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.2.993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f353f38efc9 code=0x0 [ 496.864554][T11916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.597168][T12168] FAULT_INJECTION: forcing a failure. [ 497.597168][T12168] name failslab, interval 1, probability 0, space 0, times 0 [ 497.698870][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.1.996 Not tainted syzkaller #0 PREEMPT(full) [ 497.698902][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.698916][T12168] Call Trace: [ 497.698924][T12168] [ 497.698932][T12168] dump_stack_lvl+0x16c/0x1f0 [ 497.698973][T12168] should_fail_ex+0x512/0x640 [ 497.699000][T12168] should_failslab+0xc2/0x120 [ 497.699037][T12168] __kmalloc_cache_noprof+0x72/0x780 [ 497.699068][T12168] ? sctp_add_bind_addr+0xae/0x3f0 [ 497.699101][T12168] ? sctp_bind_addr_match+0x193/0x300 [ 497.699149][T12168] ? sctp_add_bind_addr+0xae/0x3f0 [ 497.699181][T12168] sctp_add_bind_addr+0xae/0x3f0 [ 497.699217][T12168] sctp_do_bind+0x2d6/0x700 [ 497.699247][T12168] sctp_connect_new_asoc+0x5e7/0x770 [ 497.699276][T12168] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 497.699306][T12168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.699343][T12168] __sctp_connect+0x3f3/0xc60 [ 497.699372][T12168] ? do_raw_spin_lock+0x12c/0x2b0 [ 497.699402][T12168] ? __pfx___sctp_connect+0x10/0x10 [ 497.699436][T12168] ? __pfx_sctp_inet_connect+0x10/0x10 [ 497.699464][T12168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.699497][T12168] ? __pfx_sctp_inet_connect+0x10/0x10 [ 497.699522][T12168] sctp_inet_connect+0x15f/0x200 [ 497.699569][T12168] __sys_connect_file+0x141/0x1a0 [ 497.699608][T12168] __sys_connect+0x13b/0x160 [ 497.699639][T12168] ? __pfx___sys_connect+0x10/0x10 [ 497.699681][T12168] ? xfd_validate_state+0x61/0x180 [ 497.699707][T12168] ? __pfx_ksys_write+0x10/0x10 [ 497.699754][T12168] __x64_sys_connect+0x72/0xb0 [ 497.699788][T12168] ? lockdep_hardirqs_on+0x7c/0x110 [ 497.699824][T12168] do_syscall_64+0xcd/0xfa0 [ 497.699865][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.699889][T12168] RIP: 0033:0x7f327258efc9 [ 497.699907][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.699931][T12168] RSP: 002b:00007f32733dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 497.699954][T12168] RAX: ffffffffffffffda RBX: 00007f32727e5fa0 RCX: 00007f327258efc9 [ 497.699970][T12168] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 497.699984][T12168] RBP: 00007f3272611f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.699999][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.700013][T12168] R13: 00007f32727e6038 R14: 00007f32727e5fa0 R15: 00007ffcdf82d228 [ 497.700044][T12168] [ 499.078843][T11916] veth0_vlan: entered promiscuous mode [ 499.181922][T11916] veth1_vlan: entered promiscuous mode [ 499.407101][T11916] veth0_macvtap: entered promiscuous mode [ 499.470621][T11916] veth1_macvtap: entered promiscuous mode [ 499.604308][T11916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.666387][T11916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.759289][T10541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.810254][T10541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.906313][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 923 with max blocks 16 with error 117 [ 499.986796][T10541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.999800][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 499.999800][ T36] [ 500.044243][T10541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.279030][T12221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1003'. [ 500.605122][T12221] hsr_slave_0 (unregistering): left promiscuous mode [ 500.911887][T10541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.954767][T10541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.112753][T10557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.192828][T10557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.258280][T12299] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1012'. [ 505.405426][T12321] ubi0: attaching mtd0 [ 505.507196][T12321] ubi0: scanning is finished [ 505.529664][T12321] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 505.749882][T12321] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 507.456712][T12356] Invalid ELF header magic: != ELF [ 508.205803][T12377] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1023'. [ 508.305251][T12375] Console: switching to colour VGA+ 80x25 [ 508.314270][T12380] ubi0: attaching mtd0 [ 508.315660][T12380] ubi0: scanning is finished [ 508.315702][T12380] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 508.499426][T12380] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 509.849351][T12416] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 510.788531][T12419] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 511.673682][ T30] audit: type=1326 audit(4294967299.520:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.2.1033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f353f38efc9 code=0x0 [ 512.048614][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.055572][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.393189][T12460] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 514.121771][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1046'. [ 515.024853][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1052'. [ 515.323678][T12509] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 516.120556][T12531] FAULT_INJECTION: forcing a failure. [ 516.120556][T12531] name fail_futex, interval 1, probability 0, space 0, times 1 [ 516.172178][T12531] CPU: 1 UID: 0 PID: 12531 Comm: syz.0.1054 Not tainted syzkaller #0 PREEMPT(full) [ 516.172209][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.172223][T12531] Call Trace: [ 516.172230][T12531] [ 516.172239][T12531] dump_stack_lvl+0x16c/0x1f0 [ 516.172278][T12531] should_fail_ex+0x512/0x640 [ 516.172304][T12531] get_futex_key+0x1d0/0x1560 [ 516.172347][T12531] ? __pfx_get_futex_key+0x10/0x10 [ 516.172384][T12531] ? __mutex_trylock_common+0xe9/0x250 [ 516.172417][T12531] futex_wake+0xea/0x530 [ 516.172448][T12531] ? __pfx_futex_wake+0x10/0x10 [ 516.172474][T12531] ? __lock_acquire+0xb8a/0x1c90 [ 516.172510][T12531] do_futex+0x1e3/0x350 [ 516.172534][T12531] ? __pfx_do_futex+0x10/0x10 [ 516.172555][T12531] ? __might_fault+0xe3/0x190 [ 516.172593][T12531] mm_release+0x24e/0x300 [ 516.172628][T12531] do_exit+0x68e/0x2bf0 [ 516.172657][T12531] ? __pfx_do_exit+0x10/0x10 [ 516.172680][T12531] ? do_raw_spin_lock+0x12c/0x2b0 [ 516.172708][T12531] ? find_held_lock+0x2b/0x80 [ 516.172744][T12531] do_group_exit+0xd3/0x2a0 [ 516.172770][T12531] get_signal+0x2671/0x26d0 [ 516.172816][T12531] ? __pfx_get_signal+0x10/0x10 [ 516.172850][T12531] ? do_futex+0x122/0x350 [ 516.172873][T12531] ? __pfx_do_futex+0x10/0x10 [ 516.172906][T12531] arch_do_signal_or_restart+0x8f/0x790 [ 516.172946][T12531] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.172990][T12531] ? ksys_write+0x1ac/0x250 [ 516.173023][T12531] ? __pfx_ksys_write+0x10/0x10 [ 516.173061][T12531] exit_to_user_mode_loop+0x85/0x130 [ 516.173090][T12531] do_syscall_64+0x426/0xfa0 [ 516.173128][T12531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.173151][T12531] RIP: 0033:0x7f713d58efc9 [ 516.173169][T12531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.173192][T12531] RSP: 002b:00007f713e48c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 516.173214][T12531] RAX: fffffffffffffe00 RBX: 00007f713d7e6098 RCX: 00007f713d58efc9 [ 516.173229][T12531] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f713d7e6098 [ 516.173243][T12531] RBP: 00007f713d7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.173257][T12531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.173270][T12531] R13: 00007f713d7e6128 R14: 00007ffeb61b4600 R15: 00007ffeb61b46e8 [ 516.173300][T12531] [ 516.415084][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.465111][T12562] can: request_module (can-proto-0) failed. [ 520.983724][T12575] FAULT_INJECTION: forcing a failure. [ 520.983724][T12575] name failslab, interval 1, probability 0, space 0, times 0 [ 521.083826][T12575] CPU: 1 UID: 0 PID: 12575 Comm: syz.0.1063 Not tainted syzkaller #0 PREEMPT(full) [ 521.083858][T12575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.083873][T12575] Call Trace: [ 521.083880][T12575] [ 521.083889][T12575] dump_stack_lvl+0x16c/0x1f0 [ 521.083929][T12575] should_fail_ex+0x512/0x640 [ 521.083952][T12575] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 521.083995][T12575] should_failslab+0xc2/0x120 [ 521.084020][T12575] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 521.084062][T12575] ? __addrconf_sysctl_register+0xbb/0x360 [ 521.084107][T12575] ? kmemdup_noprof+0x29/0x60 [ 521.084139][T12575] kmemdup_noprof+0x29/0x60 [ 521.084172][T12575] __addrconf_sysctl_register+0xbb/0x360 [ 521.084214][T12575] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 521.084260][T12575] ? __asan_memcpy+0x3c/0x60 [ 521.084295][T12575] addrconf_init_net+0x50c/0x8e0 [ 521.084335][T12575] ? __pfx_addrconf_init_net+0x10/0x10 [ 521.084373][T12575] ops_init+0x1e2/0x5f0 [ 521.084398][T12575] setup_net+0x100/0x390 [ 521.084420][T12575] ? __pfx_setup_net+0x10/0x10 [ 521.084443][T12575] ? debug_mutex_init+0x37/0x70 [ 521.084480][T12575] copy_net_ns+0x2f8/0x690 [ 521.084507][T12575] create_new_namespaces+0x3ea/0xa90 [ 521.084550][T12575] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 521.084595][T12575] ksys_unshare+0x45b/0xa40 [ 521.084619][T12575] ? __pfx_ksys_unshare+0x10/0x10 [ 521.084644][T12575] ? xfd_validate_state+0x61/0x180 [ 521.084679][T12575] __x64_sys_unshare+0x31/0x40 [ 521.084702][T12575] do_syscall_64+0xcd/0xfa0 [ 521.084742][T12575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.084765][T12575] RIP: 0033:0x7f713d58efc9 [ 521.084784][T12575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.084807][T12575] RSP: 002b:00007f713e4ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 521.084829][T12575] RAX: ffffffffffffffda RBX: 00007f713d7e5fa0 RCX: 00007f713d58efc9 [ 521.084845][T12575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 521.084864][T12575] RBP: 00007f713d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 521.084879][T12575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.084892][T12575] R13: 00007f713d7e6038 R14: 00007f713d7e5fa0 R15: 00007ffeb61b46e8 [ 521.084923][T12575] [ 522.191142][T12585] netlink: zone id is out of range [ 522.196306][T12585] netlink: zone id is out of range [ 522.289967][T12585] netlink: zone id is out of range [ 522.321988][T12585] netlink: zone id is out of range [ 522.327148][T12585] netlink: zone id is out of range [ 522.451939][T12585] netlink: zone id is out of range [ 522.457093][T12585] netlink: zone id is out of range [ 522.629867][T12585] netlink: zone id is out of range [ 522.740947][T12585] netlink: zone id is out of range [ 522.746119][T12585] netlink: zone id is out of range [ 522.842318][T12591] can: request_module (can-proto-5) failed. [ 526.114435][T10563] netdevsim netdevsim128 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.640086][T12675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 527.787678][T12675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 527.962621][T12675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 528.080966][T12675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.170146][T12675] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 528.253112][T12675] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 528.463559][T12675] CPU0 is offline. [ 528.496747][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.512471][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.522993][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.532961][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.541482][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.564141][T12677] chnl_net:caif_netlink_parms(): no params data found [ 529.750038][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 529.809816][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 529.976845][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1084'. [ 530.040347][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 530.047332][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 530.186439][T12705] synth uevent: /devices/virtual/bdi/7:15: unknown uevent action string [ 530.224296][T12705] bdi 7:15: uevent: failed to send synthetic uevent: -22 [ 530.257523][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.309912][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.317163][T12677] bridge_slave_0: entered allmulticast mode [ 530.408055][T12677] bridge_slave_0: entered promiscuous mode [ 530.460902][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.502068][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.533253][T12677] bridge_slave_1: entered allmulticast mode [ 530.557959][T12677] bridge_slave_1: entered promiscuous mode [ 530.603733][ T5841] Bluetooth: hci4: command tx timeout [ 530.883273][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.949184][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 530.983188][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.329493][T12677] team0: Port device team_slave_0 added [ 531.483983][T12677] team0: Port device team_slave_1 added [ 531.926459][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.974259][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.119974][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 532.148011][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.256741][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.300402][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.428578][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.680061][ T5841] Bluetooth: hci4: command tx timeout [ 532.996544][T12677] hsr_slave_0: entered promiscuous mode [ 533.040795][T12677] hsr_slave_1: entered promiscuous mode [ 533.072997][T12677] debugfs: 'hsr0' already exists in 'hsr' [ 533.111610][T12677] Cannot create hsr debugfs directory [ 533.156013][T12735] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 534.120537][T12746] netlink: 'syz.0.1093': attribute type 11 has an invalid length. [ 534.200061][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 534.345013][T12677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 534.474339][T12677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 534.548168][T12753] ubi0: attaching mtd0 [ 534.563931][T12677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 534.603230][T12753] ubi0: scanning is finished [ 534.654223][T12753] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 534.717766][T12677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 534.760181][ T5841] Bluetooth: hci4: command tx timeout [ 534.960472][T12753] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 535.323796][T12677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.436818][T12677] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.523365][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.530593][T10557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.624261][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.631485][T10557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.652950][T12768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 535.673462][T12768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 535.699412][T12768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.740334][T12768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 535.805704][T12768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 535.836358][T12768] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 535.909004][T12768] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 536.002822][T12768] CPU0 is offline. [ 536.085609][T12677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 536.153752][T12677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.722101][T12780] size and base must be multiples of 4 kiB [ 536.728008][T12780] CPU: 1 UID: 0 PID: 12780 Comm: syz.2.1098 Not tainted syzkaller #0 PREEMPT(full) [ 536.728040][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.728055][T12780] Call Trace: [ 536.728064][T12780] [ 536.728074][T12780] dump_stack_lvl+0x16c/0x1f0 [ 536.728115][T12780] mtrr_del+0xd1/0x110 [ 536.728141][T12780] mtrr_ioctl+0x922/0xcf0 [ 536.728166][T12780] ? __pfx_mtrr_ioctl+0x10/0x10 [ 536.728197][T12780] ? find_held_lock+0x2b/0x80 [ 536.728238][T12780] ? __fget_files+0x20e/0x3c0 [ 536.728273][T12780] ? __pfx_mtrr_ioctl+0x10/0x10 [ 536.728303][T12780] proc_reg_unlocked_ioctl+0x229/0x320 [ 536.728329][T12780] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 536.728359][T12780] __x64_sys_ioctl+0x18e/0x210 [ 536.728389][T12780] do_syscall_64+0xcd/0xfa0 [ 536.728449][T12780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.728474][T12780] RIP: 0033:0x7f353f38efc9 [ 536.728493][T12780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.728517][T12780] RSP: 002b:00007f35401f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.728539][T12780] RAX: ffffffffffffffda RBX: 00007f353f5e6180 RCX: 00007f353f38efc9 [ 536.728554][T12780] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000004 [ 536.728569][T12780] RBP: 00007f353f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.728620][T12780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.728634][T12780] R13: 00007f353f5e6218 R14: 00007f353f5e6180 R15: 00007fff38ef23d8 [ 536.728665][T12780] [ 537.306069][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 537.721838][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 537.728032][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 537.811690][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 537.879915][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 537.943679][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.345564][T12677] veth0_vlan: entered promiscuous mode [ 539.414895][T12677] veth1_vlan: entered promiscuous mode [ 539.563599][T12677] veth0_macvtap: entered promiscuous mode [ 539.633882][T12677] veth1_macvtap: entered promiscuous mode [ 539.737655][T12677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.797938][T12677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.916159][T10543] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.946108][T10543] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.960640][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 540.016489][T10543] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.066602][T10543] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.458328][T10557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.518902][T10557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.671249][T10563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.704980][T10563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.041875][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 544.311529][ T30] audit: type=1326 audit(4294967298.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz.5.1110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1da38efc9 code=0x0 [ 545.458979][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.030644][T12885] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1114'. [ 546.065180][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.394840][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.519599][T12885] mac80211_hwsim hwsim26 : renamed from wlan0 (while UP) [ 547.136861][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.883793][ T36] bridge_slave_1: left allmulticast mode [ 547.957672][ T36] bridge_slave_1: left promiscuous mode [ 547.974058][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.171139][ T36] bridge_slave_0: left allmulticast mode [ 548.222544][ T36] bridge_slave_0: left promiscuous mode [ 548.266882][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.832780][T12922] ubi0: attaching mtd0 [ 548.888304][T12922] ubi0: scanning is finished [ 548.937253][T12922] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 549.313250][T12922] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 549.922856][T12935] ubi0: attaching mtd0 [ 549.928369][T12935] ubi0: scanning is finished [ 550.000038][T12935] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 550.220823][T12935] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 550.657431][T12942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 550.986146][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.006144][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.026733][ T36] bond0 (unregistering): Released all slaves [ 551.151722][ T36] tipc: Left network mode [ 551.631832][T12947] FAULT_INJECTION: forcing a failure. [ 551.631832][T12947] name fail_futex, interval 1, probability 0, space 0, times 0 [ 551.781935][T12947] CPU: 1 UID: 0 PID: 12947 Comm: syz.0.1123 Not tainted syzkaller #0 PREEMPT(full) [ 551.781965][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.781979][T12947] Call Trace: [ 551.781986][T12947] [ 551.781994][T12947] dump_stack_lvl+0x16c/0x1f0 [ 551.782033][T12947] should_fail_ex+0x512/0x640 [ 551.782057][T12947] get_futex_key+0xff0/0x1560 [ 551.782097][T12947] ? __pfx_get_futex_key+0x10/0x10 [ 551.782133][T12947] ? __mutex_trylock_common+0xe9/0x250 [ 551.782164][T12947] futex_wake+0xea/0x530 [ 551.782193][T12947] ? __pfx_futex_wake+0x10/0x10 [ 551.782217][T12947] ? __lock_acquire+0xb8a/0x1c90 [ 551.782251][T12947] do_futex+0x1e3/0x350 [ 551.782274][T12947] ? __pfx_do_futex+0x10/0x10 [ 551.782294][T12947] ? __might_fault+0xe3/0x190 [ 551.782330][T12947] mm_release+0x24e/0x300 [ 551.782362][T12947] do_exit+0x68e/0x2bf0 [ 551.782390][T12947] ? __pfx_do_exit+0x10/0x10 [ 551.782412][T12947] ? do_raw_spin_lock+0x12c/0x2b0 [ 551.782442][T12947] ? find_held_lock+0x2b/0x80 [ 551.782477][T12947] do_group_exit+0xd3/0x2a0 [ 551.782502][T12947] get_signal+0x2671/0x26d0 [ 551.782543][T12947] ? __pfx_sock_write_iter+0x10/0x10 [ 551.782578][T12947] ? __pfx_get_signal+0x10/0x10 [ 551.782611][T12947] ? do_futex+0x122/0x350 [ 551.782633][T12947] ? __pfx_do_futex+0x10/0x10 [ 551.782658][T12947] arch_do_signal_or_restart+0x8f/0x790 [ 551.782696][T12947] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 551.782738][T12947] ? ksys_write+0x1ac/0x250 [ 551.782770][T12947] ? __pfx_ksys_write+0x10/0x10 [ 551.782807][T12947] exit_to_user_mode_loop+0x85/0x130 [ 551.782835][T12947] do_syscall_64+0x426/0xfa0 [ 551.782891][T12947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.782914][T12947] RIP: 0033:0x7f713d58efc9 [ 551.782932][T12947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.782954][T12947] RSP: 002b:00007f713e4ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 551.782976][T12947] RAX: fffffffffffffe00 RBX: 00007f713d7e5fa8 RCX: 00007f713d58efc9 [ 551.782991][T12947] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f713d7e5fa8 [ 551.783005][T12947] RBP: 00007f713d7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 551.783019][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.783032][T12947] R13: 00007f713d7e6038 R14: 00007ffeb61b4600 R15: 00007ffeb61b46e8 [ 551.783062][T12947] [ 552.540288][T12981] net_ratelimit: 29 callbacks suppressed [ 552.540307][T12981] netlink: zone id is out of range [ 552.600625][T12974] delete_channel: no stack [ 552.641760][T12981] netlink: zone id is out of range [ 552.709952][T12981] netlink: zone id is out of range [ 552.782811][T12981] netlink: zone id is out of range [ 552.854058][T12981] netlink: zone id is out of range [ 552.905915][T12981] netlink: zone id is out of range [ 552.975005][T12981] netlink: zone id is out of range [ 553.038564][T12981] netlink: zone id is out of range [ 553.123654][T12981] netlink: zone id is out of range [ 553.199447][T12981] netlink: zone id is out of range [ 554.008409][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1131'. [ 554.096507][T13004] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 554.214457][ T36] hsr_slave_0: left promiscuous mode [ 554.351534][ T36] hsr_slave_1: left promiscuous mode [ 554.371219][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.432660][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.452892][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.452917][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.510378][ T36] veth1_macvtap: left promiscuous mode [ 554.525302][ T36] veth0_macvtap: left promiscuous mode [ 554.529931][ T36] veth1_vlan: left promiscuous mode [ 554.550120][ T36] veth0_vlan: left promiscuous mode [ 555.937070][ T36] team0 (unregistering): Port device team_slave_1 removed [ 556.030376][ T36] team0 (unregistering): Port device team_slave_0 removed [ 556.956274][T13027] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 557.040100][T13027] netlink: 'syz.0.1136': attribute type 13 has an invalid length. [ 558.486650][T13056] block nbd9: NBD_DISCONNECT [ 559.119435][T13071] [U]  [ 559.122684][T13071] [U] [ 559.125412][T13071] [U] [ 559.128132][T13071] [U] [ 559.198628][T13071] [U] [ 559.201401][T13071] [U] [ 559.204124][T13071] [U] [ 559.206909][T13071] [U] [ 559.269123][T13071] [U] [ 559.271882][T13071] [U] [ 559.274600][T13071] [U] [ 559.277324][T13071] [U] [ 559.355141][T13071] [U] [ 559.357911][T13071] [U] [ 559.360629][T13071] [U] [ 559.363347][T13071] [U] [ 559.451279][T13071] [U] [ 559.454058][T13071] [U] [ 559.456781][T13071] [U] [ 559.459497][T13071] [U] [ 559.524389][T13071] [U] [ 559.527151][T13071] [U] [ 559.529880][T13071] [U] [ 559.532600][T13071] [U] [ 559.600041][T13071] [U] [ 559.602819][T13071] [U] [ 559.605535][T13071] [U] [ 559.608253][T13071] [U] [ 559.686136][T13071] [U] [ 559.688902][T13071] [U] [ 559.691621][T13071] [U] [ 559.694333][T13071] [U] [ 559.785781][T13071] [U] [ 559.788541][T13071] [U] [ 559.791268][T13071] [U] [ 559.794017][T13071] [U] [ 559.857001][T13071] [U] [ 559.859786][T13071] [U] [ 559.862526][T13071] [U] [ 559.865249][T13071] [U] [ 559.931239][T13071] [U] [ 560.034420][T13068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.124490][T13094] zswap: compressor not available [ 561.525632][T13068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.813687][T13068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.885293][T13124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1148'. [ 561.959489][T13123] openvswitch: HfR: Dropping previously announced user features [ 562.012157][T13068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.175619][T13124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.303568][T13124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.086979][T13139] random: crng reseeded on system resumption [ 563.634429][T13136] zswap: compressor not available [ 563.965834][T13153] tipc: Enabling of bearer <@):^\/\> rejected, media not registered [ 565.012115][T13177] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1156'. [ 566.218191][T13199] ubi0: attaching mtd0 [ 566.257117][T13199] ubi0: scanning is finished [ 566.297979][T13199] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 566.614756][T13199] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 567.251701][T13212] XFS: Clearing xfsstats [ 570.131133][T13258] ubi0: attaching mtd0 [ 570.136650][T13258] ubi0: scanning is finished [ 570.198911][T13258] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 570.486498][T13258] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 571.744088][T13293] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 572.088180][T13295] net_ratelimit: 760 callbacks suppressed [ 572.088201][T13295] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 572.660640][T13297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 572.736610][T13297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 572.849837][T13297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 572.855945][T13297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 572.919591][T13297] CPU0 is offline. [ 573.489508][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.500791][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.930700][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 574.443943][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 574.760262][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 574.851217][T13352] ubi0: attaching mtd0 [ 574.856741][T13352] ubi0: scanning is finished [ 574.919970][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 574.926165][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 574.960778][T13352] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 575.293464][T13352] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 580.751312][T13442] ================================================================== [ 580.751330][T13442] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 580.751375][T13442] Read of size 256 at addr ffff888029e4fa60 by task syz.5.1190/13442 [ 580.751396][T13442] [ 580.751408][T13442] CPU: 1 UID: 0 PID: 13442 Comm: syz.5.1190 Not tainted syzkaller #0 PREEMPT(full) [ 580.751435][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 580.751450][T13442] Call Trace: [ 580.751469][T13442] [ 580.751478][T13442] dump_stack_lvl+0x116/0x1f0 [ 580.751514][T13442] print_report+0xcd/0x630 [ 580.751535][T13442] ? __virt_addr_valid+0x81/0x610 [ 580.751557][T13442] ? __phys_addr+0xe8/0x180 [ 580.751597][T13442] ? fbcon_prepare_logo+0xa03/0xc70 [ 580.751637][T13442] kasan_report+0xe0/0x110 [ 580.751659][T13442] ? fbcon_prepare_logo+0xa03/0xc70 [ 580.751706][T13442] kasan_check_range+0x100/0x1b0 [ 580.751734][T13442] __asan_memcpy+0x23/0x60 [ 580.751767][T13442] fbcon_prepare_logo+0xa03/0xc70 [ 580.751810][T13442] fbcon_init+0xd77/0x1900 [ 580.751847][T13442] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 580.751886][T13442] visual_init+0x320/0x620 [ 580.751924][T13442] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 580.751955][T13442] store_bind+0x61d/0x760 [ 580.751980][T13442] ? sysfs_file_kobj+0xe4/0x290 [ 580.752014][T13442] ? __pfx_store_bind+0x10/0x10 [ 580.752038][T13442] dev_attr_store+0x58/0x80 [ 580.752074][T13442] ? __pfx_dev_attr_store+0x10/0x10 [ 580.752110][T13442] sysfs_kf_write+0xf2/0x150 [ 580.752144][T13442] kernfs_fop_write_iter+0x3af/0x570 [ 580.752173][T13442] ? __pfx_sysfs_kf_write+0x10/0x10 [ 580.752208][T13442] iter_file_splice_write+0xa24/0x12e0 [ 580.752250][T13442] ? __pfx_iter_file_splice_write+0x10/0x10 [ 580.752286][T13442] ? __pfx_copy_splice_read+0x10/0x10 [ 580.752323][T13442] ? __pfx_iter_file_splice_write+0x10/0x10 [ 580.752357][T13442] direct_splice_actor+0x192/0x6c0 [ 580.752390][T13442] splice_direct_to_actor+0x345/0xa30 [ 580.752421][T13442] ? __pfx_direct_splice_actor+0x10/0x10 [ 580.752456][T13442] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 580.752491][T13442] do_splice_direct+0x174/0x240 [ 580.752522][T13442] ? __pfx_do_splice_direct+0x10/0x10 [ 580.752553][T13442] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 580.752585][T13442] ? rw_verify_area+0xcf/0x6c0 [ 580.752616][T13442] do_sendfile+0xb06/0xe50 [ 580.752650][T13442] ? __pfx_do_sendfile+0x10/0x10 [ 580.752688][T13442] ? __pfx___might_resched+0x10/0x10 [ 580.752725][T13442] ? __x64_sys_futex+0x1e0/0x4c0 [ 580.752749][T13442] ? __x64_sys_futex+0x1e9/0x4c0 [ 580.752775][T13442] __x64_sys_sendfile64+0x1d8/0x220 [ 580.752798][T13442] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 580.752825][T13442] do_syscall_64+0xcd/0xfa0 [ 580.752864][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.752887][T13442] RIP: 0033:0x7fa1da38efc9 [ 580.752906][T13442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.752930][T13442] RSP: 002b:00007fa1db172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.752952][T13442] RAX: ffffffffffffffda RBX: 00007fa1da5e6180 RCX: 00007fa1da38efc9 [ 580.752968][T13442] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 580.752982][T13442] RBP: 00007fa1da411f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.752997][T13442] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 580.753011][T13442] R13: 00007fa1da5e6218 R14: 00007fa1da5e6180 R15: 00007ffdbb20d8b8 [ 580.753035][T13442] [ 580.753043][T13442] [ 580.753048][T13442] Allocated by task 11916: [ 580.753060][T13442] kasan_save_stack+0x33/0x60 [ 580.753095][T13442] kasan_save_track+0x14/0x30 [ 580.753129][T13442] __kasan_kmalloc+0xaa/0xb0 [ 580.753161][T13442] ctinfo_init_net+0x56/0x270 [ 580.753191][T13442] ops_init+0x1e2/0x5f0 [ 580.753209][T13442] setup_net+0x100/0x390 [ 580.753226][T13442] copy_net_ns+0x2f8/0x690 [ 580.753247][T13442] create_new_namespaces+0x3ea/0xa90 [ 580.753280][T13442] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 580.753314][T13442] ksys_unshare+0x45b/0xa40 [ 580.753335][T13442] __x64_sys_unshare+0x31/0x40 [ 580.753356][T13442] do_syscall_64+0xcd/0xfa0 [ 580.753390][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.753411][T13442] [ 580.753416][T13442] The buggy address belongs to the object at ffff888029e4fa00 [ 580.753416][T13442] which belongs to the cache kmalloc-256 of size 256 [ 580.753435][T13442] The buggy address is located 96 bytes inside of [ 580.753435][T13442] allocated 240-byte region [ffff888029e4fa00, ffff888029e4faf0) [ 580.753459][T13442] [ 580.753464][T13442] The buggy address belongs to the physical page: [ 580.753482][T13442] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29e4e [ 580.753503][T13442] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 580.753523][T13442] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 580.753543][T13442] page_type: f5(slab) [ 580.753564][T13442] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 580.753586][T13442] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 580.753608][T13442] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 580.753629][T13442] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 580.753651][T13442] head: 00fff00000000001 ffffea0000a79381 00000000ffffffff 00000000ffffffff [ 580.753672][T13442] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 580.753698][T13442] page dumped because: kasan: bad access detected [ 580.753713][T13442] page_owner tracks the page as allocated [ 580.753721][T13442] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 111215715340, free_ts 111212385050 [ 580.753764][T13442] post_alloc_hook+0x1c0/0x230 [ 580.753792][T13442] get_page_from_freelist+0x10a3/0x3a30 [ 580.753822][T13442] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 580.753853][T13442] alloc_pages_mpol+0x1fb/0x550 [ 580.753873][T13442] new_slab+0x24a/0x360 [ 580.753897][T13442] ___slab_alloc+0xdc4/0x1ae0 [ 580.753923][T13442] __slab_alloc.constprop.0+0x63/0x110 [ 580.753955][T13442] __kmalloc_noprof+0x501/0x880 [ 580.753981][T13442] fib_create_info+0x53f/0x46b0 [ 580.754013][T13442] fib_table_insert+0x177/0x1c40 [ 580.754032][T13442] fib_magic+0x4d4/0x5c0 [ 580.754055][T13442] fib_add_ifaddr+0x16d/0x580 [ 580.754083][T13442] fib_netdev_event+0x38a/0x710 [ 580.754109][T13442] notifier_call_chain+0xbc/0x410 [ 580.754130][T13442] call_netdevice_notifiers_info+0xbe/0x140 [ 580.754157][T13442] __dev_notify_flags+0x12c/0x2e0 [ 580.754190][T13442] page last free pid 5830 tgid 5830 stack trace: [ 580.754202][T13442] __free_frozen_pages+0x7df/0x1160 [ 580.754226][T13442] qlist_free_all+0x4d/0x120 [ 580.754257][T13442] kasan_quarantine_reduce+0x195/0x1e0 [ 580.754291][T13442] __kasan_slab_alloc+0x69/0x90 [ 580.754309][T13442] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 580.754340][T13442] __alloc_skb+0x2b2/0x380 [ 580.754372][T13442] netlink_alloc_large_skb+0x69/0x140 [ 580.754393][T13442] netlink_sendmsg+0x698/0xdd0 [ 580.754412][T13442] __sys_sendto+0x4a3/0x520 [ 580.754443][T13442] __x64_sys_sendto+0xe0/0x1c0 [ 580.754473][T13442] do_syscall_64+0xcd/0xfa0 [ 580.754507][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.754529][T13442] [ 580.754534][T13442] Memory state around the buggy address: [ 580.754546][T13442] ffff888029e4f980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 580.754562][T13442] ffff888029e4fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 580.754579][T13442] >ffff888029e4fa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 580.754592][T13442] ^ [ 580.754606][T13442] ffff888029e4fb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 580.754622][T13442] ffff888029e4fb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 580.754635][T13442] ================================================================== [ 580.754679][T13442] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 580.754695][T13442] CPU: 1 UID: 0 PID: 13442 Comm: syz.5.1190 Not tainted syzkaller #0 PREEMPT(full) [ 580.754723][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 580.754738][T13442] Call Trace: [ 580.754746][T13442] [ 580.754755][T13442] dump_stack_lvl+0x3d/0x1f0 [ 580.754792][T13442] vpanic+0x640/0x6f0 [ 580.754818][T13442] panic+0xca/0xd0 [ 580.754843][T13442] ? __pfx_panic+0x10/0x10 [ 580.754874][T13442] check_panic_on_warn+0xab/0xb0 [ 580.754902][T13442] end_report+0x107/0x170 [ 580.754924][T13442] kasan_report+0xee/0x110 [ 580.754948][T13442] ? fbcon_prepare_logo+0xa03/0xc70 [ 580.754990][T13442] kasan_check_range+0x100/0x1b0 [ 580.755017][T13442] __asan_memcpy+0x23/0x60 [ 580.755049][T13442] fbcon_prepare_logo+0xa03/0xc70 [ 580.755092][T13442] fbcon_init+0xd77/0x1900 [ 580.755129][T13442] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 580.755169][T13442] visual_init+0x320/0x620 [ 580.755207][T13442] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 580.755238][T13442] store_bind+0x61d/0x760 [ 580.755265][T13442] ? sysfs_file_kobj+0xe4/0x290 [ 580.755310][T13442] ? __pfx_store_bind+0x10/0x10 [ 580.755334][T13442] dev_attr_store+0x58/0x80 [ 580.755370][T13442] ? __pfx_dev_attr_store+0x10/0x10 [ 580.755406][T13442] sysfs_kf_write+0xf2/0x150 [ 580.755440][T13442] kernfs_fop_write_iter+0x3af/0x570 [ 580.755469][T13442] ? __pfx_sysfs_kf_write+0x10/0x10 [ 580.755504][T13442] iter_file_splice_write+0xa24/0x12e0 [ 580.755548][T13442] ? __pfx_iter_file_splice_write+0x10/0x10 [ 580.755583][T13442] ? __pfx_copy_splice_read+0x10/0x10 [ 580.755621][T13442] ? __pfx_iter_file_splice_write+0x10/0x10 [ 580.755655][T13442] direct_splice_actor+0x192/0x6c0 [ 580.755694][T13442] splice_direct_to_actor+0x345/0xa30 [ 580.755725][T13442] ? __pfx_direct_splice_actor+0x10/0x10 [ 580.755760][T13442] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 580.755796][T13442] do_splice_direct+0x174/0x240 [ 580.755826][T13442] ? __pfx_do_splice_direct+0x10/0x10 [ 580.755857][T13442] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 580.755889][T13442] ? rw_verify_area+0xcf/0x6c0 [ 580.755919][T13442] do_sendfile+0xb06/0xe50 [ 580.755952][T13442] ? __pfx_do_sendfile+0x10/0x10 [ 580.755983][T13442] ? __pfx___might_resched+0x10/0x10 [ 580.756016][T13442] ? __x64_sys_futex+0x1e0/0x4c0 [ 580.756040][T13442] ? __x64_sys_futex+0x1e9/0x4c0 [ 580.756064][T13442] __x64_sys_sendfile64+0x1d8/0x220 [ 580.756087][T13442] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 580.756114][T13442] do_syscall_64+0xcd/0xfa0 [ 580.756168][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.756192][T13442] RIP: 0033:0x7fa1da38efc9 [ 580.756210][T13442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.756234][T13442] RSP: 002b:00007fa1db172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.756257][T13442] RAX: ffffffffffffffda RBX: 00007fa1da5e6180 RCX: 00007fa1da38efc9 [ 580.756273][T13442] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 580.756288][T13442] RBP: 00007fa1da411f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.756303][T13442] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 580.756318][T13442] R13: 00007fa1da5e6218 R14: 00007fa1da5e6180 R15: 00007ffdbb20d8b8 [ 580.756342][T13442] [ 580.756418][T13442] Kernel Offset: disabled